One of my favorites 419 (advance-fee fraud) scams is the one about a disease 
that has "defiled" all forms of treatment.  As with most 419's, only the names 
change:

>My name is Shadak  Shari, a merchant in Dubai, in the U.A.E. I have been 
>diagnosed with prostate and esophageal Cancer that was discovered very 
>late due to my laxity in caring for my health. It has defiled all form 
>of medicine and right now, I have only about a few months to live 
>according to medical experts.

and a few hours later:

>My name is Albert ahmed, a merchant in Dubai, in the U.A.E. I have been 
>diagnosed with prostate and esophageal Cancer that was discovered very 
>late due to my laxity in caring for my health. It has defiled all form 
>of medicine and right now, I have only about a few months to live 
>according to medical experts.

and the next day:

>My name is Abdulaziz� Mohamed, a merchant in Dubai, in the U.A.E. I have 
>been diagnosed with Esophageal cancer.�It has defiled all forms of medical 
>treatment, and right now I have only about a few months to live, according 
>to medical experts.

Oh, to think of all those poor suffering merchants in Dubai!

:-)
Pierre Thomson
BIC



-----Original Message-----
From: Ryan Thompson [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 26, 2004 3:30 PM
To: Matt Kettler
Cc: Chris Santerre; [email protected]
Subject: RE: New fraud that seems to be slipping through

...
OKOKOK... This could go around in circles.

/I AM MR\./             0/7370s, 0/3711h

/I AM MR/               2/7370s, 0/3711h

The two that matched were actually "I AM MRS.". Most in my corpus are
*not* in all-caps. Thus:

/I AM MRS?[\.\s]/i      8/7370s, 0/3711h

Personally, I wouldn't give this any score to speak of, but (after a
larger corpus test), I would use it as part of a meta rule with other
Nigerian bits.

- Ryan

Reply via email to