Email Fake Website Loan Scams

Loan Scammer – Rose James

LOAN SCAM ALERT! This post gives information on the email address, which is being used by South African Advance Fee Fraud loan scammers.

Loan Scam –

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Vendor Cash Loan <>
Subject: Vendor Cash Loan
X-Originating-IP: []

Email body

Dear Valued Customer,
How are you doing today? hope this email message finds you well. Please confirm if this is the best valid email address to reach you.

Rose James (Mrs.)
Senior Loan Manager
NCR Registration No: NCRCP10758
Legal Registration No: 2018/029073/07
45 St Georges Street;
Cape Town 8001
LEGAL STATUS: Limited Company
OWNERSHIP: Vendor Solution – South Africa
Switchboard Tel: +27 21 813 9626

IP Address Analysis Header Analysis Quick Report
Originating IP:
Originating ISP: Gigatrans Ltd
City: Kiev
Country of Origin: Ukraine
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for

Creation Date: 2020-10-02T11:02:00.00Z
Registrar Registration Expiration Date: 2021-10-02T11:02:00.00Z

Registrant State/Province: Cape Town
Registrant Country: ZA

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is on a domain that was only registered 2 months ago.
  • The email was mass-mailed to many recipients using BCC.
  • The “company” are in South Africa, which is a known Advance Fee Fraud hotspot.
  • Although the sender is in South Africa, the email originated from Ukraine

Leave a Reply