INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxWhn-00000000IOR-2i36
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 13:50:59 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Mar 2026 13:50:59 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f43.google.com ([209.85.128.43]:56721)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVwB-00000000Gjc-2Gfn
for games@nl2k.ab.ca;
Tue, 03 Mar 2026 13:01:58 -0700
Received: by mail-wm1-f43.google.com with SMTP id 5b1f17b1804b1-48371bb515eso91678715e9.1
for ; Tue, 03 Mar 2026 12:01:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772568054; x=1773172854; darn=nl2k.ab.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=nG+9bld3eu4oQ0MX2KxYmK6N0TW+DJGm3qUgS/Y2lfVjrcjHW4NkhSYw0naFx2LqFq
44GutCq5FoxL0ot3RBF92dhkwsmE07KY/UAmRcUlNrlDlYA2grhvCNDVKaH/SOCLhMqL
VUaBuzMAiUyhNS614XRv1cKLdq07CmBE3Nn9PnJ34s/ibYDS3oVaQ+f4jnwFoVd208dF
SfWRPzPVjKFQvabre39JniPxv/xGEAkJTtO4/CdQsNgdH3+wpo4MIC6M4a9q2J547kb2
IjkGKH45CfClsCTZyTxbO589I0qDnsGiC7RD5nRBmI5zlOhpQK5pSxM4LIjNwDre77b0
mqIg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772568054; x=1773172854;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=RupwWbDxW1pyC9JGYuSTIVNbVrOh9XPrhtAWTOMZqhIkUq/+U5HjXDwBd/+J9zjkvt
aBWu/ChcqHc83NB11iI2qUByOATzjEfmBETf0mzv6aXLxz2uPU9Kr1vPnr+lgIim8WTM
2Q2+iCPPJ/93rwl9YOnx16gC/wg1cNKhld2Xm9J+iDMwL6zAqkwzgLxE3SuxMbaZMWZR
9SnXK5aaCZ9/DHzY4RjJYmye9yUpjX3VxSf0qLoOovhIAumvVXEcDXRTUaTytQ6iEn8Y
gM/FS32F72Gkx9YFyAlYVlcX1T1YulplrsyL2UOtti0TXb15klw0gxrQQuQ58Is8Cv3O
2gWg==
X-Forwarded-Encrypted: i=1; AJvYcCXELHZoLNsngE6NCVuF8dSsUC2x9/CV1KmT+611jtD6uKEqAjOqwd1rWv6P5oKL1AACelpMrA==@nl2k.ab.ca
X-Gm-Message-State: AOJu0Yyf+FrG98wJl/NzC6I28XSg2i0kKuSwWMVnm4oQ4cNWF+9v8vYj
Ned5kuo1lzKRUUksdLoH3mW4RlEWjxeHP1D9wSSyql/HtN5inlf06tR1
X-Gm-Gg: ATEYQzy99gpYL+hs8yH/azk7fvR3jJiy9aBV1Py65ndfglnDuKPFdzjAYUOYcaveSj2
CLIV0F8qwK2nbQdt/D4BULPy/hdDqAHVoNpTJanEP8cpInevbmhAyfTn6kOSrUXAD5oWLKkqled
z2GFb3DSAjuH8Z+PZyiWA2rjCkx5U7QThaGFbCjTRdq8YamQ8JfsxO6D3nfwn+IdW+4jjnIrcw2
c0aDnm74AeOmXG+k0+NfyiI0yDyKCg3KFCWB7lqLSzGvkUXqPHJv7ZmYiP1q9P3mutJm2ZFA3tv
U3lUbKDdRKHQYpN7JYVIA1ECBMeAdFk4dVgHH1JjpjQPMzPlJisJxyPCQZsHGzrxu1/c6WcyoWR
IktD+n4NHagfaidJ6xUI62FsDT2r0mAOYIYwUJMT3MpUdubwplgDMoEhA43f2Puwe1650yvlZgE
m/WiWJn6nqSuCixKKuUYc69PcTZ0VZ7prq40kw9A==
X-Received: by 2002:a05:600c:a4a:b0:477:5b0a:e616 with SMTP id 5b1f17b1804b1-483c9bb7c31mr306729635e9.5.1772568053944;
Tue, 03 Mar 2026 12:00:53 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-485126563ddsm38114855e9.3.2026.03.03.12.00.49
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 12:00:53 -0800 (PST)
Message-ID: <69a73df5.050a0220.3dc343.6c46@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 12:00:49 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
[209.85.128.43 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[209.85.128.43 listed in dnsbl.ahbl.org]
[209.85.128.43 listed in dnsbl.ahbl.org]
[209.85.128.43 listed in dnsbl.ahbl.org]
[209.85.128.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bli767744(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[bli767744(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.43 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 MONEY_NOHTML Lots of money in plain text
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notice of Pending Compensation Payment
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxWhc-00000000INi-0Uz3
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 13:50:48 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Mar 2026 13:50:48 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f49.google.com ([209.85.128.49]:42481)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVj9-00000000FQ7-3dvX
for doctor@nl2k.ca;
Tue, 03 Mar 2026 12:48:32 -0700
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-483703e4b08so56962535e9.1
for ; Tue, 03 Mar 2026 11:47:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772567250; x=1773172050; darn=nl2k.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=SkR5y3LRZciQaNNmop7+vVOy1xX/gE/bNo4syGXHd4y4foi1acgSlwn/7BODzjR7aR
v7k5dvyzpYurSkK7gSlKrDJecXA0ngrFnikEbRfL08ouQV5aqKVfnlEke03tf1krySI0
u3OpslLCVzq7djevqxmu3fXeBMd0wHuWBFgNbO7zsnwlkZ69uq9AVTzsgDr3ZI5N/cVB
l7YSfva6ayX0hF5+jHOLN/RdLdaTi5/oCfp8TfU2SfHMVu6qYNDKGHLGqMIEginC71RS
XPZpAcQqBkm/44cnB9q2LyOQKoF2ZF7T4QA5fzqeoikFQOg+genvsA7+Q0dwI/CMjoew
4YfA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772567250; x=1773172050;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=Hdr8jeQNcI6VcCl+ZG9kAGRb1HLhRcyv5NGpBZWVgu2g4i2UtbuLCF3Dg6tujoTCLv
Rs7SYoTTNkKIt7kEJjc3M9qpBNu0Ye6MMffLtmekwIQjS7U8qS9SVswhIvsvdvd/J43f
BddBITJHa/dhP0Tu6Fo3SCYopoJawscUOSbfjdST63/Wki+KM54FdWJecinPNOGWDgvl
+Jn4ySshRAm7aqca6JH5WQERa5QOXpUXzXl7I6l7JpggzaXTA+Ez7n5A1BoDYpbJ8P5p
4oEOJQv2gp/cfnIu9fISJhj4aqwG+Tv5RbEfI97vR4ExJWyLD7UxA3ErNe78uITk86oc
HvAg==
X-Forwarded-Encrypted: i=1; AJvYcCXwMV5e6IC/hH3hXQFcB8YfAdpUmaEZOUTz6MyX7Z/r2XLglQiFqexi6NndnUKidrMecMJmRQs=@nl2k.ca
X-Gm-Message-State: AOJu0YwVu2TMgMpQQ+crpS/gPTCmXHk+InmB1+6sBj1ZZ/lyPpfip538
Ty+pXwu0NXtLifZxia4dwgbexL7iUtsVW0L7lUnexAfRe0lKe8a9VjQE
X-Gm-Gg: ATEYQzx5/GMfSS19UL8GBKC6fOHHQ+dE/hcHo4IuMLJImBSbfYRfZ1zrdxlRcTYpLEf
Wo1teBcj5rj4tZkKEPacOw1uGuAAcILm8APglbNmF1IS6PepVJMCrNtTIydrIONUXiC+MR7z51k
2kLOPHMnw3+J3m0ryL0JqvY+UwKrVCPNQxNStYigDy6Iq77Tqtb1YqZfKEmwQNSqk+IvlFMmnZU
Pi7gZo66EMAV5bdKWsIbDorOjVXwm587LsLAjEvE2MaHgGZw2G+locwO3JZqCEIBdFK44jMdP9h
wjbE3gQMFclgc4rkGFifUKMPyYU0YDcAYnnWwXuB/MrAZWBLBv31XmbsedZNJy66/RvItEyVSCv
PzH6TPqLGDSTdiPq+KzlWUwNtxy3ke8ccFNceRKp7pVmEUe6j6CvY8jmkWz7LFwfk6mf5Z2Oc7I
dhUfzLpkil3C4dTcVPAMbsEsxGhvF6vcKEpifuDw==
X-Received: by 2002:a05:600c:5308:b0:483:a352:b4e4 with SMTP id 5b1f17b1804b1-48513a66cf5mr53632865e9.6.1772567249578;
Tue, 03 Mar 2026 11:47:29 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.25
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 11:47:28 -0800 (PST)
Message-ID: <69a73ad0.050a0220.264259.fa91@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 11:47:25 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.49 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.49 listed in wl.mailspike.net]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[captainsalca67(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[captainsalca67(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 MONEY_NOHTML Lots of money in plain text
1.0 XFER_LOTSA_MONEY Transfer a lot of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notice of Pending Compensation Payment
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxWhR-00000000INV-2AAm
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 13:50:37 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Mar 2026 13:50:37 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f48.google.com ([209.85.128.48]:42480)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVjE-00000000FQG-1AGo
for doctor@nl2k.ab.ca;
Tue, 03 Mar 2026 12:48:36 -0700
Received: by mail-wm1-f48.google.com with SMTP id 5b1f17b1804b1-483703e4b08so56962485e9.1
for ; Tue, 03 Mar 2026 11:47:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772567250; x=1773172050; darn=nl2k.ab.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=m+KCUpCERUuLvboMf59DapLu1mfDIjqcZe2+JbUO+AQNSwO3lU8jEk15B4lerFUGPE
OHslPNXHaeocrp7GXUTY5b8rg4zcgkI+qOANudqynafaLxPFWtIpcIa9igqVek7828/B
9iJ5Ygh8Qc9eHULgofqeDkTFWZd1lgtYYOLTYl+6+U4093WJ6TU/GY86SXq0DVrNDzO6
Mvy6xvVvWbyZC0TmfgS6q7nI04jDuGMDxZghkVTVrHpT+z61Cyc5h09tvrR1hdFOaqh5
km0KUgMWLpzaxA5+gA4SQrG98NCWVQh8ShuwOCQ5mOsiVW9ZQxO2JDEwH8QFGlK6J+//
KL7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772567250; x=1773172050;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=eluyslNmbAG3dmUq1tXAsgreBLAI9O96fokweYxoPmdgU1xUZawWte6KBaMgW/vqKY
7tuoUZqEQ2gW29wEXgHYXDEXFOYK/EYVpih9Pvx7RZEtkaTw44G0FISyhGq43WRpsv1l
2jjGGtQvQVxJL3t21IGY/gHwxSHKALBnOuA3ZgKoFaIMJ9exY9Ri8curbRKHy4DYIKWt
kWT6aX+Ug2hYhuhOjw8K0SCcVydxNMSl7eNhkHMQjQ98kZ0QU8caMvpBgND46X30Sjj6
91lCr6vMhqmhKLY8oRrA8zvTGlclEinVdeTj/4bhGF95VCrpkMu8387iXejwWSpDi3go
iiEw==
X-Forwarded-Encrypted: i=1; AJvYcCX/Hk0lC5dJfEaeb/iuolavlKeY1v6nixjU/65c7T+NMe01tl3eeDdeRdYynAfRo2/3eX2LESU=@nl2k.ab.ca
X-Gm-Message-State: AOJu0YyDVtnlajZ5rogoWgozGwkhrysULGVWoeLthbfA041tAEh3Y32i
wiDmc3wYTWeStZgUHzyDccVRFp18MZ2bE4oiSmbefBou0dB5OM0qjakK6GVWRAQYjNCflCvg
X-Gm-Gg: ATEYQzwtaumA1L+seyu/vr3/aEgJ+OqfHO6JM1T++Is1my3GESgohI3QW6zTBc9Y2x5
DUQh7tjb5TLPN9+MMfyh4cThDtwB4/kPSOHesmdi7P+60zZfVQ1wHHEdUDLnWMvR7srwuOtZpJc
KJtubNVZqoOcsoBsCMeVMKmqng1AciyYInlP5o5zRtoK6a26Vzyi+4K6btKdAUmqZhDgCSyZDgS
GEgtEVRoj9YrmqHwRHYelMwJ7170CCLE7lqejfpcmrcNdj2Fc5E5kSr5Yc4ovuTmeNaqhnlYKyx
CLz3xrMfnfYNhe3gJAuJkAgzIVSJZGH9xvaJ1IcYTLXGPTC/Gk0sGEX/XoRmYFvgFjB+aloLMos
l8jMrVGF/jj2mYPL3p+KHlakXF9GGpu/MsdZP9/PBiiJ0QvmYp49pJgExvpYx2IjkFjzT/daPB5
U9iZw7MgnoYhbPVLJUpBTpBTvOsfy29jzi1R3qjA==
X-Received: by 2002:a05:600c:5308:b0:483:a352:b4e4 with SMTP id 5b1f17b1804b1-48513a66cf5mr53632865e9.6.1772567249578;
Tue, 03 Mar 2026 11:47:29 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.25
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 11:47:28 -0800 (PST)
Message-ID: <69a73ad0.050a0220.264259.fa91@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 11:47:25 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
[209.85.128.48 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[209.85.128.48 listed in dnsbl.ahbl.org]
[209.85.128.48 listed in dnsbl.ahbl.org]
[209.85.128.48 listed in dnsbl.ahbl.org]
[209.85.128.48 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.48 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[captainsalca67(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[captainsalca67(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.48 listed in wl.mailspike.net]
1.5 HK_SCAM_N8 BODY: No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 HK_SCAM No description available.
0.5 MONEY_NOHTML Lots of money in plain text
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 XFER_LOTSA_MONEY Transfer a lot of money
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
Subject: {SPAM?} Notice of Pending Compensation Payment
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxWhL-00000000INK-2d7C
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 13:50:31 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Mar 2026 13:50:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f51.google.com ([209.85.128.51]:42482)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVjC-00000000FQ3-30hq
for doctor@nk.ca;
Tue, 03 Mar 2026 12:48:36 -0700
Received: by mail-wm1-f51.google.com with SMTP id 5b1f17b1804b1-483703e4b08so56962545e9.1
for ; Tue, 03 Mar 2026 11:47:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772567250; x=1773172050; darn=nk.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=Cs8KEtzcCFvDvPzzEPXHgrXuy7d+jh6YZHpC6yh+V2eQs1Q5YdM8f41FfCcA5QzvLJ
rDxalnnnhoXKHi9SnRMlhKawjvVW8yTNf/IkSiNU4vTQtgMGipct3MOMnnHLDBtLB/oj
KENWFelCjGmnbhMKTajfV0AAdK8A/lS9ZwXB+dXmzyzDP8dRyMKmecSQrpYCB7lx08jJ
1cLeGcSdPrTy1NzVpIQDnj0MnLlebYU5j0BE6hwYpcAcay11faNPD42ta/84uUSZUn8g
vJ5nMLgsxDCXBx9vqH9+LXd5S/tzNeNfFxECPzRRj38P6KdtgtUG6bFpCNviGMpOOjQ2
x11w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772567250; x=1773172050;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=MJrrzZA/9QLp1CPkMcNe7RQeagBPOBvHez4qf55RuVB9hdaSo42fmI2ULhVFByjxjx
/xBGO21K2eg5+oRo9dljjh+9xMubTD5k2NCVJe/+FM2H3g54WZXP5hGK/LmKXaKq0Hmx
vL5S1xKxPbCy3GUozou+UMHyLM0pVPnqOipmkI7AKs+NDO6RdOcwiFgQXupu6LLtwvBD
7XTW4+u8WiJ8HY9oEZbaD0aisUPL0ad8Vy7kgznJCSNd6GVo+3e6m/y2ezgcANxTQclF
Wg/cmnSmV3hr+Ok7sReKikJ/I/AaZDmmZIIiBDCIUygbB1teEJLNrnLDONlX2AvH9xD9
OpUg==
X-Forwarded-Encrypted: i=1; AJvYcCWM0BNj7+iodSxuUAaw/LB8rh4uEB1Va8XTWh6MsGe4EzE0KHz26hcyTtF8bsI9idAF48xSiFY=@nk.ca
X-Gm-Message-State: AOJu0YxXZD89b1ZVNXjm0zz1wQLiiFdX2UenS9bf+OMsvW8Gvh1vFwt/
gZMU6rz3SDCKdKJZmEm46dEcYlJNAE0y2DnH67j6BPtjq6hNebHdwa/a
X-Gm-Gg: ATEYQzx5PrNuvT1c+y/XmUbmcMA9bdGzEjFvaofcnONHuKffzO93BgoS8UlbPp+tCMD
wP+oKMlDknu7Cd9wnmP+kZCOv1moVkaXOWIyxr6pW7E4VVzc9o9i0S05IY5+ux27OC3zmLawnnW
dJZYhGvKpmZX5adKtwCPkMSODNsLIGXWr44Aa5X28gzQTSAFdgS8d689WdttQpw8wBbdRTKNBKN
Au9VkpPd317T+gfczucdWr5Zj1DIMIuLWb7mToSFhzjN1Y3yXzb/jFJBdGAZe7ZxRxWBFuIgLoK
nxkO/o1CVk5IwrETlM/VZ5EsbJqpt9hfsds1gl1QjSubX6+OTxwcf6ckPn3n3U9eP6TOyhB/myD
8sGq4H+ANacKexWt6+LdrClBr5PWqiioatOFVeA7N/QaSQiqB2Sqv6tmJk2T/E5gKeukXHKTW4N
1PoXNBbnPReVEnKZRAQZwpozuYMyaPf8rB4nE36Q==
X-Received: by 2002:a05:600c:5308:b0:483:a352:b4e4 with SMTP id 5b1f17b1804b1-48513a66cf5mr53632865e9.6.1772567249578;
Tue, 03 Mar 2026 11:47:29 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.25
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 11:47:28 -0800 (PST)
Message-ID: <69a73ad0.050a0220.264259.fa91@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 11:47:25 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
[209.85.128.51 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[209.85.128.51 listed in dnsbl.ahbl.org]
[209.85.128.51 listed in dnsbl.ahbl.org]
[209.85.128.51 listed in dnsbl.ahbl.org]
[209.85.128.51 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[captainsalca67(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[captainsalca67(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.51 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 HK_SCAM No description available.
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_NOHTML Lots of money in plain text
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notice of Pending Compensation Payment
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxWhg-00000000IOG-0YW7
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 13:50:52 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Mar 2026 13:50:52 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f47.google.com ([209.85.128.47]:42479)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVjC-00000000FQ6-3Pmc
for doctor@netknow.ca;
Tue, 03 Mar 2026 12:48:35 -0700
Received: by mail-wm1-f47.google.com with SMTP id 5b1f17b1804b1-483703e4b08so56962525e9.1
for ; Tue, 03 Mar 2026 11:47:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772567250; x=1773172050; darn=netknow.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=MCvs8lDQBlrurb6wJKR9XLCyKfzjktcpjFy+DIaW4XEd0nQusMN2o2ngt7YWk8Phqm
yzsZKrA4HcoR4MGr4vyl1ifLblqDxB1DYz6YWiWivRDwbOP0Jx+aXtEpcxpeENin+T6U
G4To6BZ+iqHMbjDGOd5UuV1xeKId4hdqHLgBc7H6YH4+eIV7IYWTq6Y003j28qN4DoJ1
Oq0rkZ+woxOyXxsjTA1fFQJR8NONNPT3nkKdUYryDsv98NkFRUqxMyQeBI32xNcrmp4H
bVWNwZPllRbdA3VQ7egsIUEktKT4gF+uD4bVleuMdNdlQFbM8Cg/dUEJmVh69lOrMnoa
UG+A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772567250; x=1773172050;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=ML+bGqbc22sckaKfd62G1KmE+B1KFpnzEGUGL5sd2Hp1fKU5zSIofIEMwTUcaXr3c+
gmFKM+/1uGdk9tmoTsvvu5MF+mx6rMXTx4JZWYaMxO2HW9n7LL2dMYsGu0PR5oq8jUvQ
Y+IVSNdXHmt9xcveesIsPjPKt06KovQe4Ayhu767BIwRICSCw9JEjxKy6yK2L3QvLHjQ
0fuHfPMQQR2bg1o4W5qNGv+FQ8xtEPFiGHDBF6roLU08BTQZcuq+XUF3CZD83myADU9u
zR/5JQJ/C9Jx/ZeRnOy0ZoOZ4BEtwrhOtEkWJKB8hXqoIe0kc3FkVWUgCmJqtniRKi3A
emUg==
X-Forwarded-Encrypted: i=1; AJvYcCWtptOpZIMXvK6XNGeTfMPkEjGFPG30gjm+KUOvo66JBir4LJX/fuN8qFR9NjyvaGpwh180WK8=@netknow.ca
X-Gm-Message-State: AOJu0YwZBYbef5Ufc//PUR2bAtnHvIizc7AQ6Q8bT3WUTFjtG8/z6IYN
qCG1udiS54zzZf7tO4Br4h2p+wa3mfrU1PCILzizu593HAWWFEEz3lJ8
X-Gm-Gg: ATEYQzxMX6iiOQEznoIomBAeHRIAqpjHovw6lc35QK6GlDn92X+rUxdt6YmjoCuiL6j
zviVNYva9hI0SZi3Rz4l8k3S8pnaQ5GdbPQokcL9+GHTRxYpzA5VnICoOyaqACtV/rurFuCxpSD
wxXcpP3dNIERGSMsuEEsJBedX3TC9tXAg5lM0XBAJt0gpN9umhDIlTGF5rAiOKkUBPVEok17XWs
4jGF96eDHLhc3tZs/QZBFtOlvyjveCuXAf6A6XMkCegLuIU2Zcp4HUz/3JGPBXS+SFMQeGFvHtT
2K90tB17/M7GNnBDi1TFGcrLlzSUctiwhGV6qduGDsH7ZgsEEiePP5EKd0/m0Y45IlVc/A4CCKm
PUf7hc/VE3s4ruDzN9aPdfM3msBqPVEDaWSB5aXeYIpozfVgAAbjMzeMEGNJZ/UsXpVqkRfATXu
Ew0Q7AM3wid//2oBnsGvv2vMoitHLavcuIZaN8xQ==
X-Received: by 2002:a05:600c:5308:b0:483:a352:b4e4 with SMTP id 5b1f17b1804b1-48513a66cf5mr53632865e9.6.1772567249578;
Tue, 03 Mar 2026 11:47:29 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.25
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 11:47:28 -0800 (PST)
Message-ID: <69a73ad0.050a0220.264259.fa91@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 11:47:25 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
[209.85.128.47 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[209.85.128.47 listed in dnsbl.ahbl.org]
[209.85.128.47 listed in dnsbl.ahbl.org]
[209.85.128.47 listed in dnsbl.ahbl.org]
[209.85.128.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.47 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[captainsalca67(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[captainsalca67(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.47 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 HK_SCAM No description available.
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 MONEY_NOHTML Lots of money in plain text
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notice of Pending Compensation Payment
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 13:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxWh7-00000000IMu-2Eti
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 13:50:17 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Mar 2026 13:50:17 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f49.google.com ([209.85.128.49]:60687)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVj9-00000000FOM-3dsr
for doctor@edmontonab.ca;
Tue, 03 Mar 2026 12:48:32 -0700
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-4806cc07ce7so68607055e9.1
for ; Tue, 03 Mar 2026 11:47:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772567245; x=1773172045; darn=edmontonab.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=be2AVCLCQ1veM9ynqTvfdQP1JAaUqPMtLg725YPxpFc8C5OS01Sw7Mh0lQ5rmDxP9f
FqCTmsPLhfzmxKXJgTKlrai0E+YQj0TJRXyG1qbQ/4cB2k2PpiOhT/fiZltGp7vTgVQQ
JvLKUDlm91gewWRjTSvO6AaWjkZWq5KnB6H7sO7+0F98UwLz5eacMnvTiPEOp+wi4VOW
Nsr7wrd+h6rRPQBdDSy1YvL1l3jo7IQcdAN6QU79WU7C5XHZhAdlXbcUY5NxX1jELd+C
+TfkbmnOhVls6d1Py93X/DenB5WH6didtu9e2emu//Y0bKq/cc/vGUN2AAdbK6JOy7vg
utEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772567245; x=1773172045;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=v80o4diCSmOFd31c3Dd5LypXt8Bo9goB/r/gHtNSE3nbNVv4O+6KAF2dgCMRjM5Rpm
GVaXARtEKSfrdcpLQaYD+L7Ra/+zwADj0MrYPP62QXJ1IwQOptfZ3ftEHQ70oztrjh+K
W2Z3iLCY8OMdnQErNa77U2p68Cf1q5If4nNnI5zulJkk/9jhsQFpZl+Jbr1wVQNJzIeL
JP0X5du9a6oQQmFMN2aTFZpq3keKFIYmO1fW8y7RraMkJHrWyOMm2U1nfSjlZ6p8KGwY
8aP6Os/Ebv0N4/Qbe/oDBppIKEnkiBWQ3Ov2gbvdaYOdbjyOUhC1S61kRbv4yJXnS0RE
TyrQ==
X-Forwarded-Encrypted: i=1; AJvYcCVJ5EnMGtiMWkx75p3q9cxTtgSvF9faLvl5v1Xpv7fqlWDBkuGJRJ85ahQxiNXTdtkYloe0VF8=@edmontonab.ca
X-Gm-Message-State: AOJu0Yy+qy85+h7YpnyhdF9i8UEg4/076NMWndN8qc4VcM5rAzABqsjo
qTJye2ySR/IvCyHGnpyZX5BMgWx3EeBAACoukmNhRTDfpECse3TNNwyO
X-Gm-Gg: ATEYQzyOBeCmoxk11Q+1nv81z5q9dHV/X/RIEKCBQIo8d1SaB2Zth+5vgt7my7Q7lrK
/c65sxBn/vCHkSpbxMQy/otnNNQdxEoeIAZSUuqYnm23UzlQht9t0Af5eQYD9EJDXxfaFmAIEX4
2p3QoW31y3j+ZCXe2yt3krgHiIWYUY9i3nvIU/eD/sl4WlUlmEpOhtqGlduxdSzx8E6fnTTHbTr
ijXfaB9DCROgP5Q3Qw8wag8BPVg6sdqoisvXLCg0+uKVl3137mDSnqVnKzFI0PsZVs9fJ+SnRtP
bDoUrcA4VoXxbO2u+3KQ1RyJno03qq+uYeNgEhFypcDRDK/PN7qzcd0Sd9P4PlYW0Z3Sk1+2K+q
IbzAs5kZ1OHfD/IkSIb7vEHOMFatHyw39KkjprtFYjr85Z33NBYnpqOBHaLoxA8DdtSWJuh0DAp
KBhAWneiz+zRZe/uRPRUy2jcwY19fMQxjiQpbJMw==
X-Received: by 2002:a05:600c:8b8a:b0:47a:935f:61a0 with SMTP id 5b1f17b1804b1-483c9b6cfccmr331897115e9.0.1772567245319;
Tue, 03 Mar 2026 11:47:25 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4851334f9edsm40953205e9.4.2026.03.03.11.47.21
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 11:47:24 -0800 (PST)
Message-ID: <69a73acc.050a0220.264259.f9a2@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 11:47:21 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[105.112.10.222 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.49 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.49 listed in sa-trusted.bondedsender.org]
0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.49 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[captainsalca67(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[captainsalca67(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.49 listed in wl.mailspike.net]
0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.49 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.49 listed in bl.score.senderscore.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 MONEY_NOHTML Lots of money in plain text
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
Subject: {SPAM?} Notice of Pending Compensation Payment
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Mar 2026 12:43:00 -0700
Received: from mail-wm1-f53.google.com ([209.85.128.53]:39675)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from )
id 1vxVdM-00000000Bye-0Yv0
for dave@doctor.nl2k.ab.ca;
Tue, 03 Mar 2026 12:42:31 -0700
Received: by mail-wm1-f53.google.com with SMTP id 5b1f17b1804b1-483ad568d68so10404255e9.2
for ; Tue, 03 Mar 2026 11:41:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1772566887; x=1773171687; darn=doctor.nl2k.ab.ca;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:from:to:cc
:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=A163dce9L3agYMryUtXbfDaTenQY3Uk8y5QBkMuFrARl8kibj2Ebw4CUPOt8LoBeq0
VBc1192l7JfVoo2yCsXSxAu1EULco6pa3F4u5z5Ag1GYD19nKJUfmBJOxmBGRh7LqZSx
nyN+vUSBjnoUYfNef3wpIXC2xR2b9bxEESAGEYzUOUrvDJT8am5JjGDK7Ok7RxJA8dEe
V1oDkJUVy/rmVaiMKZSVOSmG5RlDgTfHRs5gZJNc6SgLT1Aarxgh/hjjabSL0gu4WulM
oh1EUreIGc01tPsMFcqLjZcdvGXPkAt7zelr3eoYHWKZlqTutnwSDF7OuG+kO016AGwk
ZlPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1772566887; x=1773171687;
h=reply-to:date:to:subject:content-description
:content-transfer-encoding:mime-version:from:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/1WakjoHzu1fYA2ix9Lw9khdxBks04kiRRrrHAwk3FQ=;
b=RK7g264DGQwewVb74myjKPoD4hfQd1ey1kXOIgpfayO6e7jggaXAl12ujdkbCpsjnX
EPz9QgjQiWt5lx4mMiaielLMDPiST2Y7PdtuKob3TyC/pjEtidBr7EBclc/pb0wh3oT4
akeiwPIy1AW3A9bAzvMkc0vHPD9fmfEHK0ZWEN5RRnKUj2VvvTuaVk+X3nVu92Ue7ob5
L5YhQsL5RtOnxrd9h5XEJ7mXiuD4Dk5vjd3ME7p9/dUBh5xg0zqNzvkxZJmIEmfEDMEz
QPnYM4eC1tczKnRHxZ7eI6FGJh6z4jc5O1MSMLvOOVsZ6mrSZbmdGC+T4HVQh949ds9Q
v1wg==
X-Forwarded-Encrypted: i=1; AJvYcCV7q7+lHxUeLaS5NTn85Nyn74pN6fFzt89dgWDUAgTG8pz/aH7hY9NkjetAHdL9evw6n2pi@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyJALyvRatBPqdDHIHUVMfgqd5M+C3qY5/nrdOlSwvGoLEqZWVa
6QvwB8EXUQoMI27lnYBcuzrqcefUGZ6uuTR9SteCO0Qf8F4/MZAUWYBu
X-Gm-Gg: ATEYQzwqE2RM50ET/jDgh4VyTw+79Figj7RhN+MG6Rv/iOh5+tlTz95D+a6+rcFA4kW
74u/OAvf6rj7cvtEja8F1XlkcwwpaRvQ2RyfQKR5iTnqhobGj6WQoRPy9GBCA7v5qgifhjjDpOT
1oCT6BWRDeTmZRE6EojICWu0MCeVMQ9E4KU6WtNKB7c/a9w5u3i2HyKq6SZJyXyov1Z5ZPtPhsR
Jzm53Av7higNpxC56JPhE3KxyPNsSUwET84HdYLRaFdb6vrspT2wr5Pv/5F8P7kwIvOlVRR1hVV
mzfH+maEkWZ8MRiCtRtFPalJ1dx7UXli4oGqlr+nsxHrBL0BRs3/c8js/VLi91Yv/PvOP11JNTs
mq6X4YDPZESkprYhY8RPiwuCSilohYA/M5zDFaGGEUcadknonlfdR+ERlXimlN2i45RBi1ba4BA
5uNtu1y3mVN6oP32MKP6wM++UVLXgzZfUJXlSJGg==
X-Received: by 2002:a05:600c:34d0:b0:47a:94fc:d063 with SMTP id 5b1f17b1804b1-483c9bc553amr185043575e9.1.1772566886883;
Tue, 03 Mar 2026 11:41:26 -0800 (PST)
Received: from [10.114.60.112] ([105.112.10.222])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-485187c81adsm311945e9.6.2026.03.03.11.41.21
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 03 Mar 2026 11:41:26 -0800 (PST)
Message-ID: <69a73966.050a0220.304fc9.c161@mx.google.com>
From: IMFOFFICE
X-Google-Original-From: "IMFOFFICE"
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Notice of Pending Compensation Payment
To: Recipients
Date: Tue, 03 Mar 2026 11:41:21 -0800
Reply-To: imf_consultantoffice01@consultant.com
X-Spam_score: 13.2
X-Spam_score_int: 132
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431 Ref: XVGNN82020 | Fund Release
Code: 601 Mobile : +17712204464 WhatsApp : +13472215926 Subject: Notice of
Pending Compensation Payment
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[105.112.10.222 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
[209.85.128.53 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.53 listed in dnsbl.ahbl.org]
[209.85.128.53 listed in dnsbl.ahbl.org]
[209.85.128.53 listed in dnsbl.ahbl.org]
[209.85.128.53 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
[105.112.10.222 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.53 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.53 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.53 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.53 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.53 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chimaibiam29(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[chimaibiam29(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.53 listed in wl.mailspike.net]
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_NOHTML Lots of money in plain text
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notice of Pending Compensation Payment
15 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.54 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.54 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.54 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.54 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[imf_consultantoffice01(at)consultant.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chimaibiam29(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[chimaibiam29(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.54 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 HK_SCAM No description available.
0.5 MONEY_NOHTML Lots of money in plain text
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notice of Pending Compensation Payment
INTERNATIONAL MONETARY FUND (IMF)
Washington D.C. Office
1900 Pennsylvania Ave NW, Washington, DC 20431
Ref: XVGNN82020 | Fund Release Code: 601
Mobile : +17712204464
WhatsApp : +13472215926
Subject: Notice of Pending Compensation Payment
We are writing to inform you of an important update regarding the difficult=
ies you have encountered in receiving your long-awaited payment. We underst=
and that you have faced continuous demands for money from corrupt bank offi=
cials and courier companies, which has resulted in your funds remaining unp=
aid.
I am Dr Clarke A. Nigel , a deputy to the managing director and senior offi=
cial at the International Monetary Fund (IMF). We have received numerous re=
ports regarding the unjust treatment of individuals like you by various ban=
ks, courier companies, and diplomats across Europe, Africa, Asia, and the U=
K. In response, we have decided to take action, and I have been appointed t=
o handle your transaction directly here in the United States.
Please be advised that all government agencies, NGOs, financial institution=
s, security companies, and courier companies involved in your case have bee=
n instructed to cease any further communication with you. We strongly recom=
mend that you do not respond to them, as the IMF is now directly overseeing=
the disbursement of your payment.
Your name has appeared on our list of beneficiaries for payment, and we con=
duct payments twice a year in accordance with our banking regulations. We s=
incerely apologize for the delay and encourage you to disregard any previou=
s contact from other offices. Please focus on communication with our office=
for all payment-related matters.
Your new payment details are as follows:
United Nations Approval No: UN5685P
White House Approval No: WH44CV
Reference No: 35460021
Allocation No: 674632
Password No: 339331
Pin Code No: 55674
Certificate of Merit Payment No: 103
Release Code No: 0763
IMF Telex Confirmation No: 1114433
Secret Code No: XXTN013
Your compensation fund amounts to USD $10.7 million. Having received these =
vital payment details, you are now eligible to receive your payment. Please=
ensure that you follow my instructions closely in order to receive your fu=
nds within the next 168 hours.
To proceed, you are provided with the code: 601. Any correspondence from me=
that does not include this code should be considered fraudulent and delete=
d immediately.
Please respond to this email at imf_consultantoffice01@consultant.com witho=
ut delay, and we will provide you with further instructions on how to compl=
ete the payment process.
Thank you for your attention to this matter.
Sincerely,
Dr. Nigel A. Clarke
Deputy Managing Director
International Monetary Fund (IMF)