Loan Scam – contact@investfinancebnk.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: INVEST FINANCE BANK <aoddati@tin.it>
Reply-To: contact@investfinancebnk.com
Subject: Darlehens angebot/ Loan offer.
X-Originating-IP: 197.234.221.80:49898

Email body

Brauchen Sie Geld für Ihre Projekte ?
Investitionen brauchen ?
Wir können Ihnen helfen.
Wir gewähren Darlehen von €5000 bis €2.000.000 für einen Zinssatz von 2%.
Wenn Sie Interesse haben, können Sie sich an uns wenden.

E-mail: contact@investfinancebnk.com
Site web : www.investfinancebnk.com

Herzliche Grüße.

—

Do you need money for your projects?
Need investment?
We can help you.
We provide loans from €5000 to €2 million for an interest rate of 2%.
If you are interested, you can contact us.

E-mail: contact@investfinancebnk.com
Site web : www.investfinancebnk.com

Kind regards.

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 197.234.221.80
Originating ISP: Spacetel
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for investfinancebnk.com

Creation Date: 2017-07-14T15:39:32Z
Registry Expiry Date: 2019-07-14T15:39:32Z

Registrant Name: marconi jessica
Registrant Street: 4 rue paris jallobert
Registrant City: paris
Registrant Postal Code: 75013
Registrant Country: FR
Registrant Phone: +33.600000000
Registrant Email: jessiamc741@gmail.com

Why is this a loan scam?

1. It was sent from a totally different email address to the one that you are asked to reply to.
2. The email was mass-mailed to many recipients using BCC.
3. The email gives no indication of who is offering the loan (except for a link to a website), where they are based or who they are regulated by.
4. The ridiculous upper amount of loan being offered.
5. The email originated from Benin, which is a known Advance Fee Fraud hotspot.
6. The registrant details for the domain are fake (invalid address and clearly fake phone number)