Loan Scam – first4financeafrica@protonmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from (182.30.155.141) by webmail.indosat.net.id;
From: First For Finance Advertisement <fffoffice.sa@indosat.net.id>
Reply-To: weex@indosat.net.id
Subject: First For Finance welcomes You To Level One

Email body

To Whom It May Concern:

Kindly find attached more info on our 3% fixed interest rate Special
“PROMO”

Don’t miss this great opportunity as we look forward to welcoming you
to F.F.F.

Kindly direct all required details to: first4financeafrica@protonmail.
com

FIRST FOR FINANCE GROUP.

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 182.30.155.141
Originating ISP: Indosatm2 Asn
City: Jakarta
Country of Origin: Indonesia
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

• It was sent from a totally different email address to the one that you are asked to reply to.
• The email address used is a free Protonmail address.
• The email was mass-mailed to many recipients using BCC.
• The email gives no indication of where the company offering the loan are based or who they are regulated by.
• The email originated from Indonesia, which is a known Advance Fee Fraud hotspot.