Virus Busters Home


The Nigerian "Frozen Assets"" Windfalls are Scams

by Bruce P. Burrell (bpb@umich.edu)
for the U-M Virus Busters (virus.busters@umich.edu)

Last significant update: 06 April, 2004

This information can be freely reproduced in any medium, as long as the information is unmodified.

UPDATE 5 (06 April 2004) More arrests:In The Netherlands, 52 scammers arrested (leaving our site); in Wales, a 419 scammer sentenced to 20 months (leaving our site) (I just love the sub-title here!)

UPDATE 4 (16 April, 2003): The scammers are now using phony cashier's checks to propagate their scam. See the Iowa Office of the Attorney General's March 2003 Consumer Advisory (leaving our site).

UPDATE 3 (30 January 2003): We've been seeing variants supposedly from other countries for some time now -- South Africa, Indonesia, Zimbabwe, .... but the scam is the same. Now there is a new variant, which is much vaguer and shorter. An example is located here. Don't fall for it.

UPDATE 2: More scammers arrested. Read about it on the BBC's web site (leaving our site).

UPDATE: Some perpetrators of this scam arrested: listen to the CBC's As It Happens broadcast from 10 July, 2001 -- it's the third piece on the program, starting 09:25 minutes into the show.

For an excellent website dedicated to this scam, have a look at The 419 Coalition Website (leaving our site).

Also, if you are a U.S. citizen and you receive this scam and want to notify the proper authorities, or are a victim on this scam, you may want to browse to the United States Secret Service 419 Page (leaving our site).

This scam comes in many many forms -- it seems that these scammers have nothing else to do but write up new variants of this plague. We document only two samples -- the "next of kin" variant presented here, and the "urgent business proposals", one, but there are lots of others.

Some relate to unclaimed government funds, and the list goes on and one, but one thing remains constant: whether you receive similar correspondence by email or otherwise, all of them claim that you'll soon be wealthy by assisting the sender to unfreeze some assets. None of them will make you rich, sad to say.

The Better Business Bureau (leaving our site) warned about this scam way back in June, 1997 and probably before.

Here's a dissection of one variant; thanks to Katy Pearce for first bringing this to our attention on 17 April, 1999. In other variants, the particulars (names, phone numbers, tale of woe) are changed, but the gist remains the same:

Hmmm. Seems that this fellow thinks you are a he. "Mr. Pearce Katy."

Sorry to tell you this, but I think this means you're no longer a billionaire. ;-)

All right, Pearce, uhhh, I mean Katy: fess up. What were you doing in Mr. Enriquez's files?!? :-)

Actually, it's Ten Million Five Hundred Six *thousand*, but what's a few hundred thou between fast friends?

How convenient. Surely you didn't forget Mr. Enriquez's outstanding debt to you -- or if you did, since you're so cavalier with money, I'm sure you won't mind a bill from me for $50K for answering this email -- also applied to all our previous correspondence, of course. ;-) [Katy has been helpful for years letting the U-M Virus Busters Team know about hoaxes.]

Why? Does the "fact" that it was unclaimed mean that you (Umeh) have title to it?

Sounds more like a Hispanic to me, though that might be considered white, I suppose. Still, given that there are more whites than Hispanics, there are likely to be more white suckers than Hispanics, too....

Awwwww. I'm crushed to hear that.

... who has what address and telephone number, pray tell? I mean, even if it were provided, it would be suspect, but it's even more suspicious just to drop a name.

Is that supposed to be "dormant" account?

Ahh. Graft is such a wonderful thing.

I suggest you ("Umeh", though I'm sure that is not your real name) invest in ethics; yours seem to be bankrupt.

Hmmm. That is Nigeria's international access code....

So this is a variation of the Gypsy Switch (see e.g., "A New Twist On The Gypsy Switch" (leaving our site)), I bet: "In order to assure your integrity, please give us some assurance that you won't take all the money and run. A small deposit of, say, $6000 will reassure us that your intentions are pure."

Which you never see again, of course, nor the principal.

Yes indeed. God bless all suckers who will give me money, for they are blinded by their greed.

[Stop shouting, John.]

"Sincerely" seems a misnomer in this context.

Unless you have reason to believe this is genuine, in which case I'll sign off, saying...

... Your very best friend,

-BPB

P.S.: I'd consider contacting the proper authorities. Look at full headers, etc., and contact abuse@...

Obviously, such stuff should be ignored -- report it if you like, but I suspect the effort will be wasted. If someone asks you about the validity of this, though, for this particular scam, I suggest that you provide a pointer to this URL (http://www.umich.edu/~virus-busters/hoaxes/nigeria_scam.html) or another reputable source like e.g., the Urban Legends Reference Pages write-up (leaving our site).

The Lighter Side of 419s: Sometimes these scammers get scammed

See e.g., the (so far as I know) original (leaving our site) case where the scammers were scammed, Will Sturgeon's Silicon.com report (leaving our site) and a whole bunch more at Spamlinks (leaving our site). Also, see The 3rd Annual Nigerian EMail Conference web site (leaving our site)

For another scam-the-scammers email thread that is somewhat more technical, see "spl's" Dumb Nigerian Con-Artists page (leaving our site).

Some very funny stuff is at UC Berkeley's Tau Beta Pi your share of the $21.5 million Nigerian lost funds forum (leaving our site).

For virus or hoax info, please see our main page (http://www.umich.edu/~virus-busters/) or go to another reputable site, like The Urban Legends Reference Pages (leaving our site).

   -BPB

Virus Busters Home


Last updated: Thursday, 30-Oct-2008 11:53:47 EDT.
University of Michigan Virus Busters - virus.busters@umich.edu

visits to this page since 09 October 2000 00:12 EDT