302 䡲 Cyber Forensics Field Manual, Second Edition
authorizations [12]. e schemes violate Section 419 of the Nigerian penal code, hence the name
“419 scheme.”
A detailed, technical investigation aimed at securing a conviction of a 419 scam, would be
beyond the operational resources of nearly every police force in the world. For a successful prosecu-
tion, detectives and prosecutors would at a minimum need to take the following steps:
1. Identity of the perpetrators would need to be established. To establish identity, the detectives
would need to trace their Internet access. is would require them to fi rst obtain the IP
address used for the e-mail. At this point they would need to determine, from the appropriate
Internet service provider ...