Romance Email Scam: Amy Booke

Email sender:

[email protected]

Email title:

:rose::rose:

Body:

Hi handsome how are you doing

I was searching for a class mate I saw your email I decided to message you I hope you don’t mind,

Can we get to know more about each other if you don’t mind

Comments

I have since received several flirty photos, including pornographic images from this scammer. They claim to be in New York City, but their email time stamps indicate that they are in the UTC +1 time zone. That could mean they are in any of the following High-Risk African nations: Niger, Benin Republic, Nigeria, Cameroon, and Gabon. An IP bait will be forwarded soon.

I received this message on an erroneous email address, meaning this scammer also a operates beneficiary scams, likely one that I had previously contacted.

Has anyone ever seen romance scams or similar 419 scams from other African nations like Morocco, Algeria, or Tunisia? How about the Congo?

As I suspected, a Nigerian Romance Scammer.

Bait Hits:

IP Address 102.23.96.8
Country Nigeria, Lagos
Browser Opera Mobile (64.0.2254.62635)
Operating System Android 10
Device Tecno Mobile Spark 5 Pro
User Agent Mozilla/5.0 (Linux; U; Android 10; TECNO KD7 Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/80.0.3987.99 Mobile Safari/537.36 OPR/64.0.2254.62635
Referring URL no referrer
Host Name 102.23.96.8
ISP Oplay-Digital-Services
IP Address 102.23.96.8
Country Nigeria, Lagos
Browser Opera Mobile (64.0.2254.62635)
Operating System Android 10
Device Tecno Mobile Spark 5 Pro
User Agent Mozilla/5.0 (Linux; U; Android 10; TECNO KD7 Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/80.0.3987.99 Mobile Safari/537.36 OPR/64.0.2254.62635
Referring URL no referrer
Host Name 102.23.96.8
ISP Oplay-Digital-Services
IP Address 102.23.96.8
Country Nigeria, Lagos
Browser Opera Mobile (64.0.2254.62635)
Operating System Android 10
Device Tecno Mobile Spark 5 Pro
User Agent Mozilla/5.0 (Linux; U; Android 10; TECNO KD7 Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/80.0.3987.99 Mobile Safari/537.36 OPR/64.0.2254.62635
Referring URL no referrer
Host Name 102.23.96.8
ISP Oplay-Digital-Services
IP Address 102.23.96.9
Country Nigeria, Lagos
Browser Opera Mobile (64.0.2254.62635)
Operating System Android 10
Device Tecno Mobile Spark 5 Pro
User Agent Mozilla/5.0 (Linux; U; Android 10; TECNO KD7 Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/80.0.3987.99 Mobile Safari/537.36 OPR/64.0.2254.62635
Referring URL no referrer
Host Name 102.23.96.9
ISP Oplay-Digital-Services
IP Address 102.23.96.21
Country Nigeria, Lagos
Browser Opera Mobile (64.0.2254.62635)
Operating System Android 10
Device Tecno Mobile Spark 5 Pro
User Agent Mozilla/5.0 (Linux; U; Android 10; TECNO KD7 Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/80.0.3987.99 Mobile Safari/537.36 OPR/64.0.2254.62635
Referring URL no referrer
Host Name 102.23.96.21
ISP Oplay-Digital-Services

If anyone might be interested in baiting her, she is truly one ANGRY NIGERIAN!!!

Guaranteed they are not women. The ones that try for me are usually from Accra, Ghana.

Yeah, I’m aware these f***ers are men. They just steal some girls pics.

But Ghana is a growing hotspot, I’ve seen them a lot too.

the IP Address located in the email header was 209.85.220.41, the geo location comes up as 493 W Middlefield Rd, Mountain View, CA 94043 which is a gas station.

That’s a Google mail server IP address, you’re not gonna get their IP address from an email lol wtf.

1 Like

More info dug up plus some email screenshots :joy:
I decided to freak her out a bit by telling her her cell phone information!:muscle:





It could be either. If you do a video chat and its quick and short with no audio or audio issues then disconnect… it could be someone with a loop video. If you get a phone number, you will probably talk to a female scammer, or the girlfriend or sister of the scammer.

Thank you for doing this! This scammer is so FOUL and SUPER FUNNY TO MESS WITH!!!

1 Like

1 Like

funny thing is here, is that she fell for the IP logger links twice in one day! That’s a pricless idiot. :rofl: :rofl:

1 Like

You can & I have. Most just gives the server but some contain the IP of the senders PC.

Most common email providers like google and yahoo will only provide you with their server address in the email header. But there are a select few who show the source IP address.

1 Like

The fact is, any Nigerian IP is high risk at this point.

1 Like

This is one of the funniest scammers I’ve encountered yet. She, aka some fat Nigerian b*stard, also must run a beneficiary scam operation because the email she contacted me on is nowhere near predictable and I use the address for other 419 scams.