Category: Email

Categories
Email Loan Scams

Loan Scammer – Pay Porte Finance

Loan Scam Alert

Loan Scam – pay.port@financier.com & payportfinance@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Pay Porte <payportfinance@gmail.com>
Reply-To: Pay Porte <payportfinance@gmail.com>
Subject: Affordable Loan
Received: from sonic311-24.consmr.mail.sg3.yahoo.com 
(sonic311-24.consmr.mail.sg3.yahoo.com. [106.10.244.41])

Email body

This email had no message, just a Word document attachment, the contents of which are shown below.

Attached Word document

Pay Porte finance offers You Personal Loan, Business Loan or Car Loan? Perhaps Bad Credit Records
not a problem .contact us today we make online transaction within 48 hours! No face to face interview.
for more information E-mail
INFORMATION NEEDED FROM YOU.
Full Names…………………………
Country………………………………………
Full Address………………………..
Sex……………………………………………..
Age……………………………………………
Personal Phone number…………………
Home Phone Number…………….……
Monthly Income……………………
Loan Amount Needed………………
Loan Duration………………… ………
Where did you hear about us………
Email address
PAYPORTE FINANCE IS A CERTIFIED WORLD WIDE LENDING COMPMAY THAT OFFER
LOAND NATION WIDE
For more information Contact
Unit G4, Century Gate
Summer Greens Drive
Century City
Cape Town
Western Cape
South Africa
Tel:+27-74-355-5922 Fax : 0862125182
Email: pay.port@financier.com, payportfinance@gmail.com
Signed:Mr Wesley David

IP Address Analysis

Header Analysis Quick Report
Originating IP: 106.10.244.41
Originating ISP: Internet Content Provider
City: n/a
Country of Origin: Singapore
* For a complete report on this email header goto 
ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a Yahoo email address, but made to look like it cam from the Gmail address.
  2. The email addressed used are free Gmail and financier.com addresses.
  3. The email was mass-mailed to many recipients using BCC.
  4. There was no actual message in the email, just a Word document attachment. Scammers often try this tactic to bypass spam filters.
  5. The company claims to be in South Africa, but the email was sent from an IP address in Singapore.
Categories
Email

Loan Scammer – James Kaplan Loan Company

Loan Scam Alert

Loan Scam – kleinhans091@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Richard Maxwell <jalava6650@utm.edu.ec>
Reply-To: kleinhans091@gmail.com
To: Recipients <jalava6650@utm.edu.ec>
Subject: Loan
Received: from [192.168.8.49] (unknown [41.217.4.220]) by mail.utm.edu.ec

Email body

Are you looking for a reputable company that gives out loans with low interest rate of just 0.2%, then you are at the right place, @James Kaplan loan Company, located in the United States of America, give it a try and you will not be disappointed by us, contact us via email ……….. kleinhans091@gmail.com :Name,Amount,Duration,Phone Number,Country,City And Home Address, please contact us for more information,.. REPLY TO THIS EMAIL: kleinhans091@gmail.com Call Phone +1 (915) 243 6422 … office addresses ……. 300 Carnegie Center, Suite 240 Princeton, NJ 08540 United states of America …218356

IP Address Analysis

Header Analysis Quick Report
Originating IP: 41.217.4.220
Originating ISP: Spectranet
City: Abuja
Country of Origin: Nigeria
* For a complete report on this email header goto
 ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to and the sending address belongs to a US educational establishment.
  2. The email addresses used is a free Gmail address.
  3. The email was mass-mailed to many recipients using BCC.
  4. The totally ridiculous interest rate being offered.
  5. The email was sent from Nigeria, which is a known Advance Fee Fraud scam hotspot.
Categories
Email Loan Scams

Loan Scammer – Chris Cameron

Loan Scam Alert

Loan Scam – info.blackrockinvestmentllc@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Chris Cameron <efinanceholdings@gmail.com>
Sender: info.blackrockinvestmentllc@gmail.com
To: undisclosed-recipients:;
Bcc: [Redacted]
Subject: Seeking financial assistance

Email body

Do you or your company need and kind of business loan, investment loan,
house loan, project loan, company loan,

if yes send us the amount you need and the year you will pay back the loan and your phone no

Mr Chris Cameron
Loan Management

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used are both free Gmail addresses.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
Categories
Email Loan Scams

Loan Scammer – Aberdeen Assets & Finance

Loan Scam Alert

Loan Scam – jonathanallison044@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: “Aberdeen Assets & Finance” <hoaitt@panservices.vn>
Reply-To: “Aberdeen Assets & Finance” <jonathanallison044@gmail.com>
Subject: The Interest Rate could be as low as 2% with between 5 to 10 years period of Re-payment.
X-Originating-IP: [10.1.1.10]

Email body

My name is Jonathan Allison Staff and a Broker to Aberdeen Asset and Finance with Home office at the United Kingdom with branches all over the world. In times of Economic Recovery all over the world, we are offering Loans to both small and large scale Businesses at a very low interest rate. The Interest Rate could be as low as 2% with between 5 to 10 years period of Re-payment. If you are interested in acquiring loan to promote and grow your business you can take advantage of this rare business opportunity by contacting us back of your interest and also stating specifically your preferred area of investment.

Regard.
Jonathan Allison.
Investment Manager

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to and the one used to sent it is a Vietnamese domain.
  2. The email addresses used are both free Gmail and Yahoo addresses.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  5. The Opiginating IP address 10.1.1.10 is fake and has been spoofed to hide the sender’s true location.
  6. The low interest rate being offered.
Categories
Email Loan Scams

Loan Scammer – Zebra Finance Company

Loan Scam Alert

Loan Scam – gcgfinancialhomeitl@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: GCG FINANCE <hcarrion4652@utm.edu.ec>
Reply-To: GCG FINANCE <gcgfinancialhomeitl@gmail.com>
Subject: Easy Loan Offer
X-Originating-IP: [41.190.12.230]

Email body

Hello,

I want to use this medium and opportunity to inform everyone that our
company is giving out loans in a very affordable and low interest rate
of 3%. We are offering loans ranging from $ 5,000 to 10 Million US
Dollars without any pre-payment penalty involved. We offer full legal
documentation of the funding as well as approval and licensing of
accredited funds to customers within 3-5 working business days.

We offer loan programs ranging from;

Hard Money Loans,
Personal Loans,
Business Loans,
Joint Venture Loans,
Student Loans, Car Loans,
Construction Loans, Bridge Loans,
Private Loans, Mortgage Loans, ETC

Please Kindly contact via email if you are interested in obtaining any
kind of loan. We will be readily available to attend to you and assist
you immediately.

More Information will be given, as soon as you wish to apply.

Thank you and have a nice working day.

Regards,

Francis Cain,
Public Relations Officer / Loan Agent,
Zebra Finance Company.

IP Address Analysis

Header Analysis Quick Report
Originating IP: 41.190.12.230
Originating ISP: Emts-nigeria-as
City: Abuja
Country of Origin: Nigeria
* For a complete report on this email header 
goto ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to and the email address used to sent it belongs to a US educational establishment.
  2. The company name in the email headers is totally different from that in the email body.
  3. The email addresses used is a free Gmail address.
  4. The email was mass-mailed to many recipients using BCC
  5. The email gives no indication of where they are based or who they are regulated by.
  6. The ridiculous upper amount of loan being offered.
  7. The email was sent from Nigeria, which is a known Advance Fee Fraud scam hotspot
Categories
Email Loan Scams

Loan Scammer – esfinance0017 gmail.com

Loan Scam Alert

Loan Scam – esfinance0017@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: AE <ae-postmaster@angel.ocn.ne.jp>
Reply-To: <esfinance0017@gmail.com>
To: undisclosed-recipients:;
Subject: Re: Our Soft Loan Mainly for Individuals & Cooperate Bodies

Email body

Dear Sir/Madam,

We are a Licensed Investment company in UAE, duo to market quest for maximizing our shareholders value in our company, we are looking out for a viable investment projects outside UAE we can fund as a soft loan under our ongoing cooperate finance program at 3% interest rate per annum without collateral.

We are mostly interested in the following sectors; Oil/Gas, Banking, Real estate, Stock Speculation, Mining, Transportation, Hotel & Tourism, Health Sector, Tobacco, Communication Services, Agriculture, Forestry & Fishing, Thus any feasible sector.

Note that the borrower shall procure a Surety Bond from the Insurance company base here in Dubai for the Security Coverage.

If you have any viable project which requires funding, we would like to work with you, send the business plan or any related documents via email at; esfinance0017@gmail.com

Warm Regards,

Management.
E-mail: esfinance0017@gmail.com

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used is a free Gmail address.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, or who they are regulated by.
  5. The email claims to be from a company in the UAE, but was sent using a Japanese domain.
  6. The email mentions that a Surety Bond will be required. This is how the scammer will steal your money – by referring you to a fake Insurance company.
Categories
Email Loan Scams

Loan Scammer – citgroup financier.com

Loan Scam Alert

Loan Scam – citgroup@financier.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: “WE OFFER LOAN AT 2% INTEREST RATE” <gracewebinvite@extendgrace.org>
Cc: “CITGROUP@FINANCIER.COM” <CITGROUP@financier.com>
Reply-To: “CITGROUP@FINANCIER.COM” <CITGROUP@financier.com>
Subject: Join me at Grace Church
To: [long list of email addresses]

Email body

WE OFFER LOAN AT 2% INTEREST RATE, E-MAIL FOR MORE INFORMATION: CITGROUP@FINANCIER.COM

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email address used is a free email address.
  3. The email was mass-mailed to many recipients, whose email addresses were all in the “To:” field.
  4. The email was send using a “share this” form on a religious website.
  5. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  6. The ridiculously low interest rate being offered.
Categories
Email Fake Website Loan Scams

Loan Scammer – China Grand Financial Investment Foundation Limited

Loan Scam Alert

Loan Scam – jun.xiuliu@cnffiff-hk.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: CHINA GRAND FINANCIAL INVESTMENT FOUNDATION LIMITED <info@toyotauk-europe.com>
Reply-To: jun.xiuliu@cnffiff-hk.com
To: undisclosed-recipients:;
Subject: Info

Email body

CHINA GRAND FINANCIAL INVESTMENT FOUNDATION LIMITED
Address: 17 / F, 38 / F, 38 Hill Street,
Mong Kok, Kowloon , Hong Kong
Telefax: +852-22345078

Greeting,

Thank you for your reading this. Please consider this proposal
lucrative and contact me urgently if your are interested.

We specialize in providing equity funding for projects and corporate and
Personal loan funding at 3% Interest Rate for a duration of 10Years. We
have financial capability to provide early stage funding including
fresh cut BG’s, MTN and MT760.

We are interested in growing our influence and reach to other countries,
through company financing and grants. Our investment criteria For
funding are projects in the renewable & the alternative energy sector,
public and private health care services, ICT & device technology, mining
and government contracts, construction and real estate development,
e-commerce and specialized education, deference and information
technology.

We also provide funding for NGO’s as grants for their intended projects
at its disposal. For further details please contact directly with your
business plan or project summary.

Email: jun.xiuliu@cnffiff-hk.com

Yours faithfully,
Mr. Jun Xiu Liu
Chairman and President

WhoIs details for cnffiff-hk.com

Creation Date: 2018-05-22T15:44:47Z
Registrar Registration Expiration Date: 2019-05-22T15:44:47Z

Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)

The domain cnffiff-hk.com now displays a message saying that it has been suspended.

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email was mass-mailed to many recipients using BCC.
  3. The domain used by the scammer was only registered a few days ago using privacy protection to hide the registrant’s details and has now been suspended by its hosts.
  4. The “company” claim to be in Hong Kong, yet are mailing people all over the world, where they have no authority to offer loans.
Categories
Email Loan Scams

Loan Scammer – khumalobarrister gmail.com

Loan Scam Alert

Loan Scam – khumalobarrister@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: “Jesus A. Perez H.” <alejandro.perez@cj.df.gob.mx>
Reply-To: khumalobarrister@gmail.com
Subject:
X-Originating-IP: [41.113.50.9]

Email body

Do you need a loan to start up a business,clear bill? pls contact us for more details.via email khumalobarrister@gmail.com

IP Address Analysis

Header Analysis Quick Report
Originating IP: 41.113.50.9
Originating ISP: Ticsa-asn
City: Johannesburg
Country of Origin: South Africa
* For a complete report on this email header goto
  ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to and appears to be a hijacked Mexican Government email address.
  2. The email addresses to reply to is a free Gmail address.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  5. The email originated from South Africa, which is a know Advance Fee Fraud hotspot.
Categories
Email Fake Website Loan Scams

Loan Scammer – RapidLoan (Pty) Ltd

Loan Scam Alert

Loan Scam – nicole@financialview.co.za – rapidloan.co.za

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

from: RapidLoan (Pty) Ltd <nicole@financialview.co.za> via amazonses.com
reply-to: nicole@financialview.co.za

Email body

Loan Scammer - nicole@financialview.co.za

Apply Now

RapidLoan (Pty) Ltd
486 Rossouw St
De Wilgers, Pretoria 0082

Office Hours:
8:00am-5:00pm
Monday – Friday

Clicking on the “Apply Now” link takes the victim to the website rapidloan.co.za. The website has no physical contact details, just a contact form.

WhoIs details for rapidloan.co.za:

Creation Date: 2015-12-21T08:07:00Z
Registry Expiry Date: 2018-12-21T08:07:00Z

Registrant Name: Bertus Vosloo
Registrant Organization:
Registrant Street: 99 O' Reilly Merry rd, Rynfield
Registrant City: Benoni
Registrant State/Province: Gauteng
Registrant Postal Code: 1501
Registrant Country: ZA
Registrant Phone: +27.791672925
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: admin@callconnexion.co.za

Why is this a loan scam?

  1. It was sent from a totally different domain to the one used for the website and via yet another domain.
  2. The email was mass-mailed to many recipients using BCC.
  3. The email gives little text, just an image (a tactic often used by spammers to avoid filters).
  4. The lender claims to be in South Africa, yet is emailing people worldwide.
  5. The website has no physical contact details, just a form. Legitimate businesses tell their customers where they are and give them phone numbers and emails to contact them on.