FOREIGN REMITTANCE OPERATION DEPARTMENT
We received instruction few days from our correspondence bank to transfer the sum of $10.5 million into your account which we are on the process to make your payment through Digital River Visa Electron Card on your name so that you can make withdrawal from any ATM machine system in your country by your self, to avoid any problem.
But we are surprise this morning when we are about to load the fund into the Digital River Visa Electron Card and received another email from Ms JANE MOORE whom claim to be your representative and forward to us the following account information for us to transfer the fund into her account. The account which she forward to us is as follow.
NAME JANE MOORE
Bank OF America TX2-817-01-01
9308 Forest Lane, Dallas TX 75243
ROUTING # 541740162
ACCT # 488030345645
Please, Do reconfirm to us as a matter of urgency if this lady is from you and have you authorized her to receive your fund.
If this lady is not your representative, Kindly choose the method you will like to receive your funds with and forward the information to us now .
(1)Wire Transfer (OWT)
(2) Atm Card
However, we shall proceed to issue all payment details to the said Ms. Jane Moore, if we do not hear from you within 24hrs from today,we will process and release the fund into Ms Jane Moore account.
Confirm your receipt of this mail without delay.
Yours in service
Mr John S.
(sender IP is 220.127.116.11) firstname.lastname@example.org
Received: from nm17-vm6.bullet.mail.sg3.yahoo.com ([18.104.22.168]) by COL0-MC4-F12.Col0.hotmail.com Received: from [22.214.171.124] by nm17.bullet.mail.sg3.yahoo.com with NNFMP; 16 Apr 2013 19:30:19 -0000 Received: from [126.96.36.199] by tm10.bullet.mail.sg3.yahoo.com with NNFMP; 16 Apr 2013 19:30:19 -0000 Received: from [127.0.0.1] by omp1006.mail.sg3.yahoo.com with NNFMP; 16 Apr 2013 19:30:19 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: email@example.com Received: (qmail 85365 invoked by uid 60001); 16 Apr 2013 19:30:17 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1366140617; bh=rj8Vc/VtaxK6osYusrEDdXxhzCyAyrfnmQGrGQyytXw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=HfKgGvj9mBly6BwnXu9+bYwF9IOoSqV9lnM9q4q9ztI3LoqQyb/JENCAlblZKWB3pCN7kwA+KY2mthDbKZowBHUmKCQ3RBNLi5XCKwGkKDyEHgBUt5VEb9ibOghiexnD5ShbApD46fvxDLaz0CSts44fRXuRODaV8wNqmjGu0V0= DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=X5tgoIG3NkstErm63JMlb8EIoHuG2yPI61HBZ3HejMf/qeN6PM39efHTAvd62XOOamPjuqVwvv+Txk2SIEOJ+LfiJ63w7b3+sKmA6/2Ro4wNJsBMjO8jdhOWcreRzp3Dx8g4q3MujPFeCQSgH8BNwEKh1Ts1kNw4vbbiPJ05tlc=; X-YMail-OSG: FeMElMkVM1lxmpYstpRoDRPBNoF39rie0ELAFKG.yGwLBay 92lttksxMYPx8_s2BYX8K Received: from [188.8.131.52] by web15304.mail.cnb.yahoo.com via HTTP; Wed, 17 Apr 2013 03:30:15 CST X-Rocket-MIMEInfo: 002.001,DQoNCg0KUk9ZQUwgQkFOSyBPRiBTQ09UTEFORA0KRk9SRUlHTiBSRU1JVFRBTkNFIE9QRVJBVElPTiBERVBBUlRNRU5UDQpIb2xib3JuLCBMb25kb24sVUsNClRlbDogKzQ0NzAzNTk1NjQxNw0KRW1haWw6IHJveWFsLWJrQG1hbmFnZXIuaW4udGgNCg0KDQpXZSByZWNlaXZlZCBpbnN0cnVjdGlvbiBmZXcgZGF5cyBmcm9tIG91ciBjb3JyZXNwb25kZW5jZSBiYW5rIHRvIHRyYW5zZmVyIHRoZSBzdW0gb2YgJDEwLjUgbWlsbGlvbiBpbnRvIHlvdXIgYWNjb3VudCB3aGljaCB3ZSBhcmUgb24gdGhlIHByb2Nlc3MBMAEBAQE- X-RocketYMMF: firstname.lastname@example.org X-Mailer: YahooMailClassic/15.1.7 YahooMailWebService/0.8.140.532 Message-ID: <1366140615.84466.YahooMailClassic@web15304.mail.cnb.yahoo.com> Date: Wed, 17 Apr 2013 03:30:15 +0800 (CST) From: ROYAL BANK OF SCOTLAND FOREIGN REMITTANCE OPERATION DEPARTMENT <email@example.com> Reply-To: firstname.lastname@example.org Subject: ROYAL BANK OF SCOTLAND FOREIGN REMITTANCE OPERATION DEPARTMENT To: undisclosed recipients: ; MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="1947414416-499613919-1366140615=:84466" Return-Path: email@example.com