Please post the entire header. It could be tricky finding the line with the scammer's IP, so we will help you. Don't forget to remove your own email address from it, replace it with XXX.
For Nigerian scammers:
if your scammer uses Hotmail or Gmail, DO NOT post headers AT ALL. There is no IP of a sender there, they are useless, we don't need them.
--------------------------------------------------
If your scammer uses Yahoo, please post only:
- the LAST Received: From line, the one that is above X-Mailer
- From line.
Example:
That's all we need. We don't need the entire thing.Received: from [41.190.2.70]
From: James richard <james_richwiliams@yahoo.com>
------------------------------------------------------
If your scammer uses anything else, please post the entire header. It could be tricky finding the line with scammer's IP, so we will help you. Don't forget to remove your own email address from it, replace it with XXX.