From: emmazulu_7@zipmail.com.br
Sent: February 5, 2005
To: emmazulu_7@zipmail.com.br
CC: abuse@zxcmail.com; ; abuse@bigmailbox.com ; abuse@corp.terra.com.pa ; abuse@fsmail.net ; abuse@hotmail.com ; spamalert@latinmail.com ; abuse@tripod.com ; abuse@mail.com ; fraud@mail2world.com ; abuse@support.netzero.com ; abuse@outblaze.com ; postmaster@seeqmail.com ; SPAM@UltimateEmail.com ; abuse@tin.it ; abuse@webmail.co.za ; spammer@example.com ; abuse@example.com ; user@yahoo.co.uk ; uk-mail-abuse@yahoo-inc.com ; abuse@yahoo.com ; sg-mail-abuse@yahoo-inc.com ; de-abuse@yahoo-inc.com ; abuse@zwallet.com
Subject: OUR CANDID APEAL

GOODDAY SIR,
I WISH TO INTRODUCE MYSELF TO YOU.MY NAME IS EMMA K ZULU. A LIBERIAN CITIZEN.I AM A FIRST DAUGHTER OF LATE MR.JOHN K ZULU THE FORMER PERSONAL ADVICER TO THE VICE PRESIDENT OF REPUBLIC OF LIBERIA. SIR , MY FATHER WAS SHOT DEAD BY WEST SIDE BOYS ON HIS WAY TO HIS OFFICE AND HE WAS TAKING TO ABIDJAN FOR A MEDICAL TREATMENT WHILE HE LATER DIED.WHEN HE WAS ON HIS SICK BED HE REVEALED TO ME ABOUT HIS FUND $12.5M USD HE DEPOSITED IN ALL STATES BAKN IN NIGERIA.HE HANDED OVER ALL THE BANK DOCUMENTS TO ME SUCH AS BANK SLIP AND BANK DEPOSIT ISSUED TO HIM DURING THE TIME OF DEPOSIT.MEANWHILE, I AND MY TWO YOUNGER SISTERS ARE HERE IN LAGOS NIGERIA SEEKING FOR REFUGE.AND MY LATE FATHER TOLD ME THAT THIS FUND HAVE TO BE TRANSFERRED TO A FOREIGN BUSINESS PARTNER MR.KENNETH SMITH BUT SINCE MR.KENNETH SMITH'S CONTACT ADDRESS IS NOWHERE TO BE LOCATED,I AND MY MOTHER WANT YOU TO STAND AS MR.KENNETH SMITH TO CLAIM THIS FUND ON OUR BEHALF. PLEASE SIR,WE NEED YOUR ASSISTANT AND WE WANT YOU TO LECTURE US ON HOW BEST WE CAN INVEST THIS MONEY IN YOUR COUNTRY AS SOON AS THE MONEY BEEN TRANSFERRED INTO YOUR ACCOUNT AND WE HAVE DECIDED TO OFFER YOU (20% )OF THE TOTAL AMOUNT FOR YOUR ASSISTANCE WHILE 5% WILL BE MAP OUT FOR OTHER EXPENCES. AS SOON AS WE HEAR FROM YOU WE WOULD RELEASE THE BANK CONTACT TO YOU SO THAT YOU CAN GET IN CONTACT TO THEM(BANK) FOR THE TRANSFFER OF THE FUND INTO YOUR ACCOUNT.
BEST RGDS
EMMA K ZULU

The interesting thing about this email is not the story about the millions of dollars waiting to be collected, but the list of CC's.

Normally these 419 fraud letters are sent to list of receivers as BCC. In this way the receiver cannot see that it is part of a mass-mailing. To hide this further, they put the senders email address in the To-field. In the email above, the scammer used the CC field instead of the BCC field. In this case we can also see how he found the receivers. The email addresses are all harvested from this webpage: http://419.bittenus.com/whattodo.htm. This was a bad choice for the scammer, because these addresses are used to report 419 fraud!

From: abusezip <abuse@zipmail.com.br>
Sent: February 5, 2005
Subject: RESPOSTA AUTOMATICA BOL REF: 419 fraud: emmazulu_7@zipmail.com.br

Anote o nmero desta ocorrncia.
Take note of this ticket number.

76371266

---- Recebemos sua mensagem com relao ao uso indevido da internet. Verificaremos o caso relacionado ao nosso provedor, sendo que as medidas adotadas por nossa empresa estaro de acordo com nossa "Poltica e Procedimentos da Internet".

Esclarecemos que, de acordo com a mensagem enviada, esta pode ser a nica resposta que voc receber e todos os casos enviados caixa postal abuse@zipmail.com.br, sero analisados. Atenciosamente,

Atendimento Eletrnico ZIPMAIL

---- We received your message about the bad use of the internet. We'll ckeck your reclamation relationed with our provider, and the measures that will be taken, are in harmony with our "Policy and Internet Procedures".

We inform that, according to the sent message, this could be the only answer that you'll receive and all messages sents to abuse@zipmail.com.br will be checked.

Best Regards Customer Care - Zipmail