Hi,
Good to hear from you this morning, I woke up this morning and rushed to the computer just to read your mail, the flight agency said the flight cost is 2000 dollars and after i checked all the money with, i found out i only have 1100 dollars left with me, so you will have to take care of the remaining 900 dollars, I told you about meeting you, and when i was mailing you this morning i felt like you sending the money right way so i could just go get my flight ticket and take the next plane to meet you, I just can't wait to meet you, I feel like i've known you all my life, i just can't wait to come down from the plane and see you waiting for me at the airport, so i could give you the Big Hug and Kiss that i have prepared for you, Anyway here is the flight agents western union information below which you will use to send the money:  

Name: JOHN JACKSON
Address: BANK ANTHONY WAY  IKEJA
City:  IKEJA
State: LAGOS
Security Question: WHO?
Security Answer:  MYLOVE.

Honey you will have to send me the information the gave you at  the bank after sending the money looking forward to be with you ....babe i will be dying if i was not there with you this coming weeks ...also i was told when ever they confirm my payment the next day i will be there with you .....honey when you first meet me what are you thinking you gonna do to me ? my is to kiss you and give you the best warm Hugs that have been keep for so long to you the love of my life.....
I love you so dearly
Alfred Tim

[spoiler=Quelltext wie Antwort RnCiOXbOXdbOUrv12hxnLXzR2SWWR0RA2tlpw0tnVUsqKpwraOZ0jhaZeUcJ0Eb6q/OuNaXdDWig=
Authentication-Results: hotmail.com; sender-id=none (sender IP is 98.138.91.48) Quelltext.from=alfredtim19@yahoo.com; dkim=pass (testing mode) Quelltext.d=yahoo.com; x-hmca=pass
X-SID-PRA: alfredtim19@yahoo.com
X-SID-Result: None
X-DKIM-Result: Pass(t)
X-Message-Status: n:0:n
X-AUTH-Result: PASS
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: 5z9JqDN1R9BPx3ht94Hd193eD1tUCXllVSflqj8s3DH4qCLRd0LhdG3fo7Fewi5zo8ZTRw==
Received: from nm13-vm0.bullet.mail.ne1.yahoo.com ([98.138.91.48]) by SNT0-MC2-F1.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
      Sat, 21 Apr 2012 03:11:42 -0700
Received: from [98.138.90.57] by nm13.bullet.mail.ne1.yahoo.com with NNFMP; 21 Apr 2012 10:11:41 -0000
Received: from [98.138.89.173] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Apr 2012 10:11:41 -0000
Received: from [127.0.0.1] by omp1029.mail.ne1.yahoo.com with NNFMP; 21 Apr 2012 10:11:41 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 311233.18649.bm@omp1029.mail.ne1.yahoo.com
Received: (qmail 59088 invoked by uid 60001); 21 Apr 2012 10:11:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1335003101; bh=kMs1Q42NqkZJAkvuNbBIvD+eHpmnoWSyhW0Byw7zqvI=; e; YFAcbLuJAjRa0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  e;
  VN0YrfsrNHRBI=;
X-YMail-OSG: bRblt4kVM1ljSaLGXrUNqJKrZeV_bDZOwInha0eI_dzIQsQ
RlG9zuYIkwR3SCPXJceiLh4xVxIpSOrnyJwhGTZET5V6DH8CyctW9tzM4QX.
XfeGcVT89abp5STnEFzZNZRg9UO6382HVVinhR_8D7DUpv9eG5Nx0JbZGTRC
nsl4ZQ0BPVoUsKT4r9Afp8Fpy4CM50y1kjMnJ5UhkanEon3F525vyZ1nLT7b
GRbRcWp2kT47jIm8cezNVvzaPOcgr167_eg2qw1Juk8a7I2UtQde0WCIeFvE
Jo7yVetQnkf6vTkYHwICrnvRsjlNvtLFOwsenv7EFoGJZOnN3y6gg8rbk_XB
eUNeU_RfYfQYcc678kNEFq40u3FMGrwsGaF6ztHZ5Euw2S1U6Z.O62yZ9iOI
TslFwalkcOaIWs9Fy8VP1enD52MiGAVoCQoCyqlKINLheTxduvSi6Ke4O9GE
xpOxwleJU.YQ29jjD1t.1R5vNy9j1EWbikJklQKM-
Received: from [94.76.231.8] by web125104.mail.ne1.yahoo.com via https; Sat, 21 Apr 2012 03:11:41 PDT
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <1335003101.55279.YahooMailClassic@web125104.mail.ne1.yahoo.com>
Date: Sat, 21 Apr 2012 03:11:41 -0700 (PDT)
From: Alfred Tim <alfredtim19@yahoo.com>
To: xxx
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-409489618-1633549983-1335003101=:55279"
Return-Path: alfredtim19@yahoo.com
X-OriginalArrivalTime: 21 Apr 2012 10:11:42.0152 (UTC) FILETIME=[2605B480:01CD1FA7]

---409489618-1633549983-1335003101=:55279
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

[/spoiler]

Honey that is my flight details i feel am already with you honey i can wait to be with you. i love you with all my heart .........
Kisses
Alfred

Zitat:


[spoiler=Quelltext Spectranet =
Authentication-Results: hotmail.com; sender-id=none (sender IP is 98.138.91.141) Quelltext.from=alfredtim19@yahoo.com; dkim=pass (testing mode) Quelltext.d=yahoo.com; x-hmca=pass
X-SID-PRA: alfredtim19@yahoo.com
X-SID-Result: None
X-DKIM-Result: Pass(t)
X-Message-Status: n:0:n
X-AUTH-Result: PASS
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: Bi0FXoH2hWcK8Td6mX239lCo2myFXosL7IKt8USb7k3bz8B/y4U5XvZ/4PyA6QLRd7CU0Q==
Received: from nm11-vm3.bullet.mail.ne1.yahoo.com ([98.138.91.141]) by BAY0-MC4-F38.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
      Tue, 24 Apr 2012 02:12:51 -0700
Received: from [98.138.90.55] by nm11.bullet.mail.ne1.yahoo.com with NNFMP; 24 Apr 2012 09:12:51 -0000
Received: from [98.138.89.160] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 24 Apr 2012 09:12:51 -0000
Received: from [127.0.0.1] by omp1016.mail.ne1.yahoo.com with NNFMP; 24 Apr 2012 09:12:51 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 68103.52949.bm@omp1016.mail.ne1.yahoo.com
Received: (qmail 73584 invoked by uid 60001); 24 Apr 2012 09:12:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1335258770; bh=SCAnw/gEVEiNuwL4CKDECk6NcQm3hRAPdjOEf/ktuz0=; tent-Type; fEVNk9DU/VG4s=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  tent-Type;
  LalRzjCJw6oyM=;
X-YMail-OSG: 4XAlt9cVM1nUjOjwkEGz5Y9zWIWyRR.Wiik5U2N6Jr4Dgco
HmJH8rYOCdaFoQsUC.nBRpc4nl764u6_QQHSDDFdLUWLW7UJrIF92XObPW4u
YaVgVxhSX9BDDFzLHrP1HG26f.8yru_A4.FVjjkybMLdVxZ3N3kPKLLJde9X
t5SDNyYdjfqfj.bWJO3aCpC9sEQMZMUayGNR81Cotdz19KEiIog3MRlzZz7A
AdTJ3C.K2gPwZp2BP5hakCCi3mrMxWclKEZI4ZFWW4ykv1DINIKnrVQaX0xt
raSbOrINcQYBcsw5u2my_orHAbUB.XRbV06IFwk6tF2IF_XcTIEFJvAQdh2p
jt8MW7eQgODI_owTz6IlUid29fnSpESMK6bsY_UNvQyT9xuIJDpRENR_.Yvq
dYoOwQSyrOZjQ9JwenisPTJWuBLBeEavD4doxPKQIobN1CK59r5bMKR.sLxU
xFXwhkLGmifFi4zL_4Eg-
Received: from [197.255.169.149] by web125101.mail.ne1.yahoo.com via https; Tue, 24 Apr 2012 02:12:50 PDT
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.117.340979
Message-ID: <1335258770.69553.YahooMailClassic@web125101.mail.ne1.yahoo.com>
Date: Tue, 24 Apr 2012 02:12:50 -0700 (PDT)
From: Alfred Tim <alfredtim19@yahoo.com>
Subject: Fw: Confirmation: Lagos - Frankfurt/Main (8I2UH6)
To: xxx
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1268171098-1660003066-1335258770=:69553"
Return-Path: alfredtim19@yahoo.com
X-OriginalArrivalTime: 24 Apr 2012 09:12:51.0623 (UTC) FILETIME=[6CE6FB70:01CD21FA]

--1268171098-1660003066-1335258770=:69553
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
[/spoiler]

Zum gefälschten Pass von Tim Alfred:

Wirklich ein "Meisterstück"! Das man den maschinenlesbaren Teil unkenntlich macht, verstehe ich ja noch. Das man aber Ausstellungs- und Ablaufdatum "vergisst", ist mir nur mit der Dummheit des Fälschers erklärbar.
Auch stimmt das Datumsformat des Geburtstages nicht, wo auch noch das Jahr fehlt.

Bei der eigenhändigen Unterschrift fällt sofort auf, dass da etwas aus einem anderen Pass eingefügt wurde, das sich grafisch nicht in den Rest des Passes einfügt.