Claim: The FBI's "Department for Illegal Internet Downloads" is sending out automated warning messages via e-mail.
Status: False.
Example: [Collected on the Internet, 2003]
Subject: You use illegal File Sharing... Ladies and Gentlemen, Downloading of Movies, MP3s and Software is illegal and punishable by We hereby inform you that your computer was scanned under the IP 94.195.57.211. The contents of your computer were confiscated as an evidence, and you will be indicated. In the next days you will receive the charge in writing. In the Reference code: #34510, are all files, that we found on your computer. The sender address of this mail was masked, to protect us against mail bombs. - You get more detailed information by the Federal Bureau of Investigation -FBI- |
Origins: The address and phone number given at the foot of the message quoted above are real (they belong to the FBI's Washington, D.C., headquarters), but that's the only thing genuine about this e-mail.
The FBI may have an interest in tracking illegal downloads of copyright-protected material on the Internet, but they don't have a "Department for Illegal Internet Downloads," and they aren't sending out automated messages like the one quoted above to serve notice that "your computer was scanned" and the "contents of your computer were confiscated." If nothing else, the poor grammar and spelling — "an evidence" rather than "evidence"; "indicated" rather than "indicted" — should be an obvious giveaway that the message is a phony, and likely crafted by a non-native speaker of English. (The latter point is probably confirmed by the fact that similar messages stemming from the same source are sent out with subject lines in German.)
The FBI has issued the following denial:
Attention — FBI e-mail hoax alert! Have you recently received an
This message (which also arrives with subject lines such as "Preliminary investigation were started" [sic] and "Your IP was logged" is actually a carrier for an executable attachment which harbors the Sober.C virus, a mass-mailing worm that affects systems running any version of Microsoft Windows (other than

Symantec offers a removal tool for Sober.C on its web site.
Last updated: 29 October 2007
Sources: