Email Loan Scams

Loan Scammer – Dhia Nayla

LOAN SCAM ALERT! This post gives information on the email address, which is being used by Nigerian Advance Fee Fraud loan scammers.

Loan Scam –

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Subject: Re: Personal & Business Relief (COVID-19)
X-PHP-Script: for
From: "Dhia Nayla [CBMF]" <>

Email body


I hope you are well. In these unprecedented times with the COVID-19, we want to support you as you navigate your personal or business situation and projects.

We have decided to tentatively reach you on [REDACTED] to inform you that we are currently providing debt relief/debit financing or credit facility for your personal or business project. Financing could reach a maximum of $300M USD at a 0.67% rate per annum with minimum documentation.

If you, or anyone you know, do require such financial relief of Credit Facility for Personal or Business do not hesitate to contact us before or by October 13, 2020

Thank you, and stay safe.

UMAR, Dhia Nayla


CBMF Brokering
Kinrara Seksyen 1,
47180 Puchong, Malaysia

IP Address Analysis Header Analysis Quick Report
Originating IP:
Originating ISP: Mtn Nigeria Communication Limited
City: Abuja
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for

Creation Date: 2019-08-19T12:59:53Z
Registrar Registration Expiration Date: 2021-08-19T12:59:53Z

Registrant Name: Ramlan Hamzah
Registrant Organization: 
Registrant Street: Jalan Sp 1   
Registrant City: KL
Registrant State/Province: Wilayah Persekutuan Kuala Lumpur
Registrant Postal Code: 52100
Registrant Country: MY
Registrant Phone: +60.122776245
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email:

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is on a domain that was only registered a year ago, by someone giving only a partial address.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.

Leave a Reply