Phishing on a Digital Binary Warning Abstract

419 spam: 10 million US dollars, courtesy of “Rev. Goodluck Ebola”

I’m not saying an email claiming to be from the “Central Bank of Nigeria” with a contact handler named “Rev. Goodluck Ebola” will raise too many red flags, but…

goodluck scam

Click to Enlarge

CENTRAL BANK OF NIGERIA OFFICE OF THE GOVERNOR Zaria Street, Off Samuel Akintola Street,Garki 11, Garki-Abuja.

Our Ref: FGN/CBN/NIG/01/2017.

Your Ref………………………….

From The Desk Of Mr. Godwin Emefiele. Governor, Central Bank of Nigeria (CBN)

SUBJECT: Dear Valued Customer.

Dear Friend,

We wish to inform you that your unclaimed payment of USD$10.5 Million in Africa has been released and ready to be paid to you via PREPAID VISA CARD which you will use to withdraw the US$10.5 Million from any ATM Machine in any part of the world.

We have mandated UBA financial advicers Ghana, to send you the ATM CARD and PIN NUMBER which you will use to withdraw all your US$10.5Million Dollars in any ATM SERVICE MACHINE in any part of the world, but the maximum you can withdraw in a day is US$20,000.00 Only.

You are therefore advice to contact the Head of ATM CARD Department of UBA financial advicers Ghana;

Contact Person: Rev. Goodluck Ebola, Office email address: [snip]

Tell Rev. Goodluck Ebola, that you received a message from the CENTRAL BANK OF NIGERIA. Instructing him to send you the ATM CARD and PIN NUMBER which you will use to withdraw your USD$10.5 Million Dollars in any ATM SERVICE MACHINE in any part of the world, also send him your direct phone number and contact address where you want him to send the ATM CARD and PIN NUMBER to you.

We are very sorry for the plight you have gone through in the past years.

Thanks for adhering to this instruction and once again accept our congratulations.

Best Regards.

Mr. Godwin Emefiele. Executive Governor, Central Bank of Nigeria (CBN).

…I think I just hand stitched fifteen thousand red flags and hung them up around a printout of this email. That this comes from an entirely unrelated .jp (Japan) email address is the icing on the scam sandwich cake. This is indeed a 419 attempt and all that likely waits for you at the other end is:

  • All your money stolen
  • Your bank account used in a money mule scam
  • The sweet embrace of jailtime

Your career as a money mule may also be short lived, assuming the police don’t get you first.

What’s particularly curious here is we’ve primarily seen this one bouncing around via “Rev. Goodluck Egobia” instead of “Ebola”, so we’re not sure if this is an error, a joke, or someone at the spam factory just got bored. Either way, you should avoid replying to any emails similar to the above as it’s 100% guaranteed to be fake.


Chris Boyd


Christopher Boyd

Former Director of Research at FaceTime Security Labs. He has a very particular set of skills. Skills that make him a nightmare for threats like you.