It is well known that Internet fraud criminals are heavy users of Yahoo mail services. Around one third of all fraud mail reported to us contains a Yahoo address to which the criminals seek a response. Yahoo also offers the criminals website hosting services. When we are alerted to such fraud websites we immediately ask Yahoo to close them down, but the company will often refuse. The criminals know that Yahoo will not investigate fraud site reports if we cannot supply fraud mail sent via Yahoo facilities, therefore the criminals will simply use another mail service to send out their junk mail - and keep references to the fraud websites in the body text of the mail. This simple device seems to fool one of the Web's largest companies. They will allow the criminals to carry on their evil work, with the result that innocent people around the world become victims. Yahoo just cannot be bothered to properly investigate fraud complaints and the consequences for vulnerable people can be dire. We ask
Yahoo to close barrodainc.com. We ask again on 23 Dec 2008 as a result of another report to us. Yahoo
refuse again. The
consequence - a victim loses money (ironically the victim was a Yahoo mail
user). Another
example. Yet
another. March 2009 - another. We asked Yahoo to close un1uk.org and forwarded fraud mail which contained the address info@un1uk.org. Yahoo found themselves unable to take action - and presumably continue to host what we suspect to be a fake United Nations website. What about Yahoo mail accounts? On receiving a fraud report from Europe, we asked Yahoo to close timbrophy67@yahoo.co.uk. They responded thus:
"In this particular case, we have taken appropriate action against the Yahoo! account in question that was reported for fraudulent activities, as per our Terms of Service (TOS)." ... However, on Wed, 18 Feb 2009, timbrophy67@yahoo.co.uk was still mailing the victim's family, demanding more money: "The fastest way to send and
recieve money instantly worldwide is western union.If its sent to my personal
assistance account it will take days Yahoo refused to close: smithwilliams007@yahoo.cn. firstdirectbankwiretransferdept@ymail.com. patsummer_wch@yahoo.co.uk. support@ascontacts.com. liverycourier@yahoo.co.uk. mariejames22@ymail.com. fifi_egan@yahoo.com . fifi_egan170@yahoo.com. susan_bill06@yahoo.com. willia10doan@yahoo.co.jp. link.jimleon@yahoo.com.hk. zhu1li@yahoo.com.cn. nelsondonald53@yahoo.co.uk. sheepon@yahoo.com. mktcheung008@yahoo.com.hk. rachael_d101@yahoo.com.hk. leroy3k@yahoo.com. charlessoludo75@ymail.com. barristerfrankanthony_associates@yahoo.co.uk. westernunionoffice15@ymail.com. ericlake10@yahoo.co.uk. solomonduka@yahoo.com. barristerazimmohammed_01@yahoo.com. agentolawalejames005@rocketmail.com. murphy_ikenna@yahoo.co.uk. charles_soludo_50_11@rocketmail.com. marriotthotellondon15@yahoo.co.uk. jeanneblis@yahoo.com. fbidept.office33@ymail.com. arnaudsankara04@yahoo.com. western.union68@rocketmail.com. smithwillaimng@yahoo.cn. ningshingintern.inc01@yahoo.com.hk. smithwilliams1@yahoo.cn. smithwillaimng@yahoo.cn. rev.peteradams31@yahoo.co.uk. challlym1@yahoo.com. manager_edward_annan@ymail.com. lotterycommiteechairman@yahoo.com . mr.andrew_williams@yahoo.co.uk. declarkgladys@rocketmail.com. garywalter2000-hsbc@yahoo.com. miltonduo@yahoo.com. hiltonsuiteshotel@yahoo.ca. claire_anselme2@yahoo.fr. mdmark1960@yahoo.com.hk. william_musa01@yahoo.com. goldgroup@ymail.com. johngaga4@yahoo.com . mrdovijean@yahoo.pl. cbn_remittancefunds@yahoo.co.uk. wrightscot55@yahoo.com. albv2@yahoo.com. lottoclaimsoffice07@yahoo.co.uk. desmondaguecheta@yahoo.com. aiko.shibata@kimo.com. belsherobert@yahoo.com. georgee1111129@yahoo.com. barrcharlesrussellesq@rocketmail.com. iihyuc@yahoo.com. mrsmarinaltvnk49@ymail.com. ceciliadavid88@yahoo.fr. ashrafcotu19@yahoo.com.
A problem with criminals using Yahoo
Asia mail accounts. Often, reports to Yahoo about these are followed by
messages like this: Although Microsoft seem to be more responsive to requests for the closure of the fraud websites they host, just like Yahoo, they are easily fooled by criminals who use Hotmail and MSN mail accounts for their evil work. The scammers just need to insert a Hotmail / Live / MSN address into the body text of a fraud mail, and use another mail service (often Earthlink, Eircom.net or optusnet.com.au for example) to send. "We have found that the henry_gduru@live.com account you reported is not currently in violation of the Hotmail Terms of Use (TOU). " This was the reaction to a complaint we made and which was accompanied by the following fraud mail: Wed, 01 Apr 2009, Reply-To: <henry_gduru@live.com>
From: "Henry Duru"<infor@freakmail.de>
Microsoft refused to close:
mranthonyogbego10@live.fr.
customercare.wsterunion@live.fr .
fedexservicecouriecomp198@live.fr .
western-union002@live.fr.
fedexcoplcbenin20@live.fr.
dr.p.griffin.uk.org@live.co.uk.
ABUDU_IDRISA@hotmail.fr.
barrymorgan35@hotmail.com.
ritajohn1@live.fr .
carlossparksloans@live.co.uk .
fedexdelivery4africa01@live.co.uk.
edward-appa@live.co.uk. grahammorgans@live.co.uk.
customer_care1@live.fr .
jfrawly4@hotmail.com.
williamsbrown.ukn14@live.com. fedexcourierltd4@live.fr. w_union01@live.fr.
kennedybrownwilliams@live.com. paulowusu1@live.com.
mr.olivemoore@live.co.uk.
fedex_courier_c_benin120@live.fr .
alhyayalukmun@live.fr . emmuneldiplomat@live.fr.
londonscottish_offers@live.co.uk .
westeruniontransfer.dept37@live.fr . pam_douglas@live.ca.
mclaimsunit10@live.co.uk. mr_perry_steven1@hotmail.com.
cliare_2000@live.fr.
unitedpostalservices001@live.fr.
mrwilliams2009@hotmail.com. claimsdepartment001@hotmail.es. musa.abdulla2008@live.fr.
richardgreen12@msn.com. western_union24@live.fr
. david.barryesq69@hotmail.com.
pam_douglas@live.ca .
mrspauline_12@hotmail.com. adbafrica@live.fr
.
w.union-customercare@live.fr. westerunion_department1975@live.fr .
cliffwest81@live.co.uk.
western_union124@live.fr
. mcfaddencole2@live.com.
department@live.co.za.
engworking@live.co.za. kellyjunior@live.fr
.
Michaellee001@live.com. mathew_fidelityfirm@hotmail.com.
Mrwest101@live.co.uk. nortonfinance1@live.com. loteria.confianza@hotmail.es.
JordanBridges1945@live.com.
deskofsilva@hotmail.com. fedexparceldeliverycomapny@live.fr.
united_state_parcel_service200@live.fr
. teddykingsloaninvestment03@live.com.
ipswitchtransferbk_plc@live.com.
western.unioncustomercare@hotmail.com .
eventsmanager.bhopkins@live.co.uk .
susan_martins01@live.com. western-union035@live.fr. pastorjerryjohn@live.fr.
ems-delivery1@live.co.uk
. goodluck_2008@live.fr.
fedexcourierrb@live.fr.
fedexng_delivery@hotmail.com. andrewfedex@live.com.au
. andyhornbyandyyy@live.fr
. parcelxx@live.com .
francisnmadu@hotmail.com.
shamsuddeend_drusman@live.com .
fedex_nig@live.co.uk. mrsjaneanders@live.fr.
euromin10@live.com.
atmcardverification_unit03@hotmail.com.
ng_fedex@live.com.
g_c_plobalexpress9025@live.fr. profsccharles000@live.com. com.panyfedexx55@live.fr.
mr.kelvin.jones@hotmail.com.
westerrnunion02@live.fr.
mrjamesbriggs_ag@hotmail.com. clandreleasedept@live.in. wersternuninoofice@live.fr
. dhr.kaspernorman@live.nl.
davidelliss@live.co.uk.
dhl_1985@live.fr.
PARCELEXPRESSIBENIN@LIVE.FR. wunionmoneytransfer3@live.fr
. veronica_diata@live.fr.
mr_richardrovers02@live.com. atmdisburseunit@live.co.uk
.
westeruniontransfercenter@live.fr.
verificationdept-claims@live.com.
site.www.western_union.com@hotmail.fr.
hamiltonpaul@live.co.uk.
morris_obrian@hotmail.com.
bmwgroup023@live.com.
lady.lillysmith07@live.com
.
stella.orhpan.help@live.com.
dhl_experss_courier@live.fr. atmcard_departmentservice77@live.fr
. donatus_ben01@live.fr.
scottstephen@windowslive.com. natasha.ammed35@hotmail.com. jessebrownatm@hotmail.com
. alanwright1@live.co.uk .
ositachinaka01@hotmail.com.
ziadprivate@windowslive.com. fedex_deliverycompan@live.fr. andyhornbyhonbyandy@live.fr. w-ester-unionoffic11@live.fr
.
chrisofor@live.fr. andrewwolley_ww@live.com.
johnson_mike2008@live.fr.
verification.depts@live.co.uk.
westernmoney@live.fr. direktbnkn_nl08@live.nl. redstarcourrier.webnet@live.fr. johnburr@live.cn. mslive-intpro@live.co.uk.
mslive-xproloto@live.co.uk . windowsmicro-claimsunit@live.co.uk. asign.uknlclaim.alexwelfred@windowslive.com.
johnsonuba2009@live.fr.
mrstianageorgieva@live.com. claiming-board@live.com.
aw-prom29@msn.com . thomassmithart_gallery01@hotmail.co.uk.
and209licitors@live.nl. claim.kellywright@live.com.
enquiry22@live.co.uk .
drj.tembe@live.com .
sol_charles23@hotmail.com.
mylivecoke@live.com.
barrykuffi1@live.fr .
inquiringpweb@live.co.uk.
dptwin_update21@hotmail.com.
johngreening404@live.co.uk.
western__union@live.fr .
westernubr@live.fr.
inquiringpweb@live.co.uk
.
sgt.joeyjonesusarmy09@windowslive.com.
dioufmouka2008@hotmail.de
.
www.western.union.transferxii@live.fr .
claimsdepartment2009@live.co.uk .
martinkariba@live.co.za .
w-ester_union@live.fr .
plockett101@live.co.uk .
westnewton@live.co.uk. pastorhenryphilips04@live.fr
.
western.union05@hotmail.com .
w_unionb15@live.fr .
ww_ww.esternunion77@live.fr .
adrian.mbruce1951@live.co.uk.
imfmikebell@live.com .
atm-inquiry09@live.co.uk.
dhldeliveryservice1968@hotmail.fr .
ww.wumt_benin009@live.fr.
fatima009@live.com.
west-u-off-ben1@live.fr .
lantrust.security_sa@hotmail.es .
roseline.oba@live.com.
ww.wumt_westernubeninplc003@live.fr.
rev.ibe@live.co.uk.
d.eliverycom.panyfedex@live.fr .
mrs-sussanbunn@live.co.uk
.
nokiaconnectingpeople@hotmail.co.uk.
ma6smii@hotmail.com.
glob0line_intl@live.co.za
. a_tristan5@LIVE.CO.UK.
judithssww0022@hotmail.com.
robert.coleatlaw@hotmail.co.uk.
dhl_customeremal@live.fr.
chamberlainclare@live.co.uk.
motherjanecole76@live.co.uk .
lawchrisarranduk@hotmail.com.
michael.coxon@live.co.uk
. khasjb@live.com.my .
western.union_money.transfer111@live.fr .
pnely47@windowslive.com.
atmcard.oceanicint@live.co.uk.
abbaghali1@hotmail.com.
airlandseaexpresscustomercare002@live.fr .
frank.burrows@live.co.uk
. piusbest2009@live.co.za
. uknldraws@live.co.uk
. Khaled.Musaed@live.ca.
rose_bayo10@hotmail.com.
khasjb@live.com.my.
micro.clm@live.co.uk.
atmcardunit1@live.com.my.
sir.richardscholes@live.co.uk.
western.union_money22@live.co.uk .
western.union-mt@live.fr
.
moneygramcustomerservice@live.fr .
mary.1952@live.fr.
dannyshorechamber@live.co.uk. jim_ovia85@hotmail.com.
garyharrison09@live.co.uk
. diamond.b@live.co.uk
. davidrosie@hotmail.fr.
mrs_kara39@msn.com .
mr.john.jasper1@msn.com.
diamond.b@live.co.uk.
dallas.lee.williams.h.s.b.ck@live.co.uk.
lantrust.security_sa@hotmail.es.
cliffordmomahh@hotmail.com
. m.tokpe@live.fr. orion-clothing@live.co.uk.
mrs.sebastianblake@live.co.uk.
mrjohn_ph1@live.fr.
gregc@live.co.uk.
fredrickmbong@live.com .
c1930@live.fr .
fedex.courierservicesnig03@live.co.uk .
lawfirmuk1@live.co.uk.
mtcn_activation@live.com.
mtcn_activate@live.com.
robertokutujp@live.com.
feliciadan@live.co.za .
mtcn_activation@live.com
. drdougles.lucas@live.fr
.
pepsi.lott0.2009@live.com.sg.
joseph_murphy008@hotmail.com.
david.james77@hotmail.es.
mtcn_activate@live.com.
jacob_solomon1@live.fr .
jamalsha@live.fr.
pmillersart7@live.com.
msnclaimsdeptss@live.com.
nokclaimsdept@live.co.uk.
fedbenin2009@live.com .
webmasterinquiries-pbl@live.co.uk .
libertygroup@hotmail.es.
jamalsha@live.fr.
customerrelationss@live.com.
mslperryjohn161@live.co.uk
.
ukdraw3@hotmail.co.uk.
sir.rolandbrains@msn.com.
rolandsbrians12@live.co.uk.
LTCOLMIKEPARKER@LIVE.COM.
westerntransferdeptbenin010@live.fr .
mellisbryan2@live.com.
speedpostdiplomaticcourier@live.co.uk .
foglrecruit@live.co.uk.
nfo_union_ban@live.com.
taramuldock@live.co.uk.
jackmoris@live.com.
acountdirect50505@hotmail.co.uk .
markthambo7@hotmail.it.
gregwalter01@hotmail.com
.
westerunion_moneytransfer01@live.fr .
vannganber1@msn.com.
changk225@hotmail.com. <duspatch.dhlexpress@live.co.uk>
.
researchmanagererics@live.co.uk .
chubajohnson11@hotmail.fr
.
bernardbarker2@live.co.za .
lo.hsvincent@live.com .
chineduarinze@live.fr .
liusantonio@officeliveusers.com .
rswims@live.fr.
consulting.firm@live.co.uk
. junhaun01@hotmail.com
.
western_union_moneytransfer10@live.fr .
fmbs1914@live.co.uk .
westtern.uniontransfer33@live.fr.
georgepoyser@live.co.za.
johnengland1949@hotmail.com.
chendi_okenga@live.fr.
fdx.courier.benin_1@live.fr.
lindajames@live.fr.
missrinajacob@hotmail.fr
.
johnloaning-financiaservices@live.com.
UK_claimsdpt0007@live.com.
rare.adam@hotmail.com.
bill.fletcher@live.com.
machinggnam@hotmail.com.
abdusshafi@live.fr.
mrmudi_feez2009@hotmail.fr.
mrmudi_feez2009@hotmail.fr
.
mrsfarida.waziri@hotmail.co.uk.
simontaylor77@live.co.uk
.
claims_eventmanger01@live.co.uk .
What about Enom.com / Name-Services.com (apparently owned by a company called Demand Media Inc.)? "eNom is the second largest domain name registrar worldwide, and the number one registrar for resellers, with the largest, most active distribution network in the domain industry. eNom is accredited by the Internet Corporation for Assigned Names and Numbers (ICANN)." BUT - they also appear to register and host many fraud sites (like hsbcbank-info.com and onlinesuknationwbnet.com - reported march '09). They do not seem to like to receive requests to close those sites and it is usual to receive responses like this:
"The date of the message is: Wed, 18
Feb 2009 00:09:50 -0000
followed by:
"A message that you sent could not be
delivered to one or more of its 19 Feb 2009. We mail name-services.com, asking them to close hsbc-londononline.com as used in a fraud mail report. This request was bounced. 19 March '09. Request to close swisslott.com produced " A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: info@name-services.com retry timeout exceeded." 21 March '09. A request to
close hsb-cuk.com (fake bank site) produced a similar response. 14 April - Mail from
abuse@demandmedia.com (re swisslott.com) -
"Please be advised this email box is not monitored, and you will not get a
reply. If you have an abuse complaint, please go the Abuse Policy page and
complete the form here: enom.com/help/abusepolicy.aspx ..." 16 April '09 - Asked eNom -
NAME-SERVICES.COM (via Web form!) to close gwccn09.org
which is being used in a fake climate conference scam. 19 July '09 - Asked eNom - NAME-SERVICES.COM (via Web form!)
to close smartjobsonline.org
Domaincentral hosts fraud
websites - but does not appear to like terminating them. The company has a Web
abuse reporting page which does not work. We tried to use this to ask them to
close uyav.org which figures in a fake conference scam, but it responded by
saying "Error(s): 31 Oct. '09 - Asked
Domaincentral.com to close uyav.org - by mailing
info@domaincentral.com.
|
InterFraud / IFA Group, UK. Please, before forwarding suspicious mail, check that you have included FULL INTERNET HEADERS (see below). It is not always possible to respond to reports of fraud mail, but appropriate action is always taken. N.B. If you need to send suspicious mail for examination, please be sure to forward it complete with its full Internet headers. If you are not sure how to do this, check the help file of your mail software, see the note below or visit www.haltabuse.org/help/headers/ for instructions on revealing headers in e-mail. Please do not forward the pictures of forged documents (e.g. jpegs of "cheques") that accompany these scams, unless by request. MAIL HEADERS. You will not normally see full headers when you read your mail but these can be important in investigating Internet fraud. Microsoft Outlook Express for Windows:
Right click on the message and select Properties. Choose the Details tab and
select the Message Source Button. Copy the headers and send them along with
the body of the email. Gmail: (Thanks T.W.) "It took me a
little while to work it out, one needs to click the "down arrow" next to the
"Reply" indicator at the top-right of the message pane and select "Show
Original", a new window page opens with all the header details. You then need
to cut/copy all the text and paste it into your forwarding email." Pegasus: Users of the excellent Pegasus for Windows will probably not need me to remind them of the Raw View tab and the option to include headers in the Reply and Forward dialogues. Incredimail: In your mail program double click the email you would like to view, when it is open click on the FILE menu and choose PROPERTIES. When in the properties menu click on the DETAILS tab to view the Full Headers .
Hotmail: First, configure your options: On the upper right "Options | Help" links, click on "Options." Click on the "Mail Display Settings" link, find the item "Message Headers." Choose "Advanced" and click the "OK" button. |