Loan Scam – pay.port@financier.com & payportfinance@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Pay Porte <payportfinance@gmail.com>
Reply-To: Pay Porte <payportfinance@gmail.com>
Subject: Affordable Loan
Received: from sonic311-24.consmr.mail.sg3.yahoo.com 
(sonic311-24.consmr.mail.sg3.yahoo.com. [106.10.244.41])

Email body

This email had no message, just a Word document attachment, the contents of which are shown below.

Attached Word document

Pay Porte finance offers You Personal Loan, Business Loan or Car Loan? Perhaps Bad Credit Records
not a problem .contact us today we make online transaction within 48 hours! No face to face interview.
for more information E-mail
INFORMATION NEEDED FROM YOU.
Full Names…………………………
Country………………………………………
Full Address………………………..
Sex……………………………………………..
Age……………………………………………
Personal Phone number…………………
Home Phone Number…………….……
Monthly Income……………………
Loan Amount Needed………………
Loan Duration………………… ………
Where did you hear about us………
Email address
PAYPORTE FINANCE IS A CERTIFIED WORLD WIDE LENDING COMPMAY THAT OFFER
LOAND NATION WIDE
For more information Contact
Unit G4, Century Gate
Summer Greens Drive
Century City
Cape Town
Western Cape
South Africa
Tel:+27-74-355-5922 Fax : 0862125182
Email: pay.port@financier.com, payportfinance@gmail.com
Signed:Mr Wesley David

IP Address Analysis

Header Analysis Quick Report
Originating IP: 106.10.244.41
Originating ISP: Internet Content Provider
City: n/a
Country of Origin: Singapore
* For a complete report on this email header goto 
ipTRACKERonline

Why is this a loan scam?

1. It was sent from a Yahoo email address, but made to look like it cam from the Gmail address.
2. The email addressed used are free Gmail and financier.com addresses.
3. The email was mass-mailed to many recipients using BCC.
4. There was no actual message in the email, just a Word document attachment. Scammers often try this tactic to bypass spam filters.
5. The company claims to be in South Africa, but the email was sent from an IP address in Singapore.