It actually originates from an email address: email@example.com (SPF FAIL with IP 188.8.131.52, from a f..kwit near Gol Gol Rd, NSW, AUS).From: Mr. Tito Mboweni <firstname.lastname@example.org> (yeah right. )
Subject: REMINDER FROM THE OFFICE OF SOUTH AFRICAN MINISTER OF FINANCE.
I write in respect of the fund brought to the department of National
Treasury from Reserve bank in your name.
From the detailed report contained in the payment file that accompanied
the fund, the fund was supposed to be transferred to you from Reserve
bank, but was not due to some reasons that were not specified in the
The fund is 126,000,000 ZAR. Do you know about it?
This notification serves as the first and final notice for your fund to
be released to you and after 5 working days of this notification, if I
do not hear from you, we shall have no other option than to send the
fund over to government coffers as unclaimed.
You are required to re-confirm the following details, so that we can
commence your fund release process;
1, Your full name and age.
2, Your occupation.
3, Your cell phone number.
Honorable Minister of Finance,
Republic of South Africa.
The minister.com domain and its mail server should be sent moertoe because it is undoubtedly a long-time haven for scammers.