Tag: Advance Fee Fraud

Categories
Email Loan Scams

Loan Scammer – citgroup financier.com

Loan Scam Alert

Loan Scam – citgroup@financier.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: “WE OFFER LOAN AT 2% INTEREST RATE” <gracewebinvite@extendgrace.org>
Cc: “CITGROUP@FINANCIER.COM” <CITGROUP@financier.com>
Reply-To: “CITGROUP@FINANCIER.COM” <CITGROUP@financier.com>
Subject: Join me at Grace Church
To: [long list of email addresses]

Email body

WE OFFER LOAN AT 2% INTEREST RATE, E-MAIL FOR MORE INFORMATION: CITGROUP@FINANCIER.COM

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email address used is a free email address.
  3. The email was mass-mailed to many recipients, whose email addresses were all in the “To:” field.
  4. The email was send using a “share this” form on a religious website.
  5. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  6. The ridiculously low interest rate being offered.
Categories
Email Fake Website Loan Scams

Loan Scammer – China Grand Financial Investment Foundation Limited

Loan Scam Alert

Loan Scam – jun.xiuliu@cnffiff-hk.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: CHINA GRAND FINANCIAL INVESTMENT FOUNDATION LIMITED <info@toyotauk-europe.com>
Reply-To: jun.xiuliu@cnffiff-hk.com
To: undisclosed-recipients:;
Subject: Info

Email body

CHINA GRAND FINANCIAL INVESTMENT FOUNDATION LIMITED
Address: 17 / F, 38 / F, 38 Hill Street,
Mong Kok, Kowloon , Hong Kong
Telefax: +852-22345078

Greeting,

Thank you for your reading this. Please consider this proposal
lucrative and contact me urgently if your are interested.

We specialize in providing equity funding for projects and corporate and
Personal loan funding at 3% Interest Rate for a duration of 10Years. We
have financial capability to provide early stage funding including
fresh cut BG’s, MTN and MT760.

We are interested in growing our influence and reach to other countries,
through company financing and grants. Our investment criteria For
funding are projects in the renewable & the alternative energy sector,
public and private health care services, ICT & device technology, mining
and government contracts, construction and real estate development,
e-commerce and specialized education, deference and information
technology.

We also provide funding for NGO’s as grants for their intended projects
at its disposal. For further details please contact directly with your
business plan or project summary.

Email: jun.xiuliu@cnffiff-hk.com

Yours faithfully,
Mr. Jun Xiu Liu
Chairman and President

WhoIs details for cnffiff-hk.com

Creation Date: 2018-05-22T15:44:47Z
Registrar Registration Expiration Date: 2019-05-22T15:44:47Z

Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)

The domain cnffiff-hk.com now displays a message saying that it has been suspended.

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email was mass-mailed to many recipients using BCC.
  3. The domain used by the scammer was only registered a few days ago using privacy protection to hide the registrant’s details and has now been suspended by its hosts.
  4. The “company” claim to be in Hong Kong, yet are mailing people all over the world, where they have no authority to offer loans.
Categories
Email Loan Scams

Loan Scammer – khumalobarrister gmail.com

Loan Scam Alert

Loan Scam – khumalobarrister@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: “Jesus A. Perez H.” <alejandro.perez@cj.df.gob.mx>
Reply-To: khumalobarrister@gmail.com
Subject:
X-Originating-IP: [41.113.50.9]

Email body

Do you need a loan to start up a business,clear bill? pls contact us for more details.via email khumalobarrister@gmail.com

IP Address Analysis

Header Analysis Quick Report
Originating IP: 41.113.50.9
Originating ISP: Ticsa-asn
City: Johannesburg
Country of Origin: South Africa
* For a complete report on this email header goto
  ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to and appears to be a hijacked Mexican Government email address.
  2. The email addresses to reply to is a free Gmail address.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  5. The email originated from South Africa, which is a know Advance Fee Fraud hotspot.
Categories
Email Fake Website Loan Scams

Loan Scammer – RapidLoan (Pty) Ltd

Loan Scam Alert

Loan Scam – nicole@financialview.co.za – rapidloan.co.za

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

from: RapidLoan (Pty) Ltd <nicole@financialview.co.za> via amazonses.com
reply-to: nicole@financialview.co.za

Email body

Loan Scammer - nicole@financialview.co.za

Apply Now

RapidLoan (Pty) Ltd
486 Rossouw St
De Wilgers, Pretoria 0082

Office Hours:
8:00am-5:00pm
Monday – Friday

Clicking on the “Apply Now” link takes the victim to the website rapidloan.co.za. The website has no physical contact details, just a contact form.

WhoIs details for rapidloan.co.za:

Creation Date: 2015-12-21T08:07:00Z
Registry Expiry Date: 2018-12-21T08:07:00Z

Registrant Name: Bertus Vosloo
Registrant Organization:
Registrant Street: 99 O' Reilly Merry rd, Rynfield
Registrant City: Benoni
Registrant State/Province: Gauteng
Registrant Postal Code: 1501
Registrant Country: ZA
Registrant Phone: +27.791672925
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: admin@callconnexion.co.za

Why is this a loan scam?

  1. It was sent from a totally different domain to the one used for the website and via yet another domain.
  2. The email was mass-mailed to many recipients using BCC.
  3. The email gives little text, just an image (a tactic often used by spammers to avoid filters).
  4. The lender claims to be in South Africa, yet is emailing people worldwide.
  5. The website has no physical contact details, just a form. Legitimate businesses tell their customers where they are and give them phone numbers and emails to contact them on.
Categories
Email Loan Scams

Loan Scammer – Zee Hughes of Gold Star Finance

Loan Scam Alert

Loan Scam – mrzeehughe@outlook.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Mr Zee Hughes <mrsruthhowosu234@gmail.com>
Reply-To: mrzeehughe@outlook.com
Subject: GET BACK TO ME NOW
To: undisclosed-recipients:;
Bcc: [Redacted]

Email body

My name is Mr Zee Hughes of Gold Star Finance and I have no intention of

wasting your time. I want to know what you would like to obtain finance

for? I can provide you with any purpose with a loan interest rate of 2%

Contact now!!!. Send a reply now immediately showing

your interest.

{BORROWER’S DATA INFORMATION}

*(1)Loan Amount Needed: *(2)Loan Amount Needed In Words:

*(3)Full Names: *(4)Country: *(5)Valid Cell Phone Number Or Tel Phone:

*(6)Purpose Of Loan: *(7)Address: *(8)Occupation:

*(9)Gender: Male Or Female: *(10)Loan Duration: *(11)Age:

Following your response, I’ll get back to you immediately with further

information on how to go about processing and approving the loan. A very

nice day is my wish to you.

please make sure you contarct me via my id; mrzeehughe@outlook.com

Thanks for your patronage

I look forward to hear from you soonest.

Your’s Sincerely,

Mr Zee Hughes

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used are both free Gmail and Outlook addresses.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of where the lender is based or who they are regulated by.
  5. The ridiculous low interest rate being offered.
Categories
Email Loan Scams

Loan Scammer – Dallah Fundings

Loan Scam Alert

Loan Scam – efinanceholdings@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Sender: donald.connerfield@gmail.com
From: Dallah Fundings <efinanceholdings@gmail.com>
Subject: Financial Assistance ?
To: undisclosed-recipients:;

Email body

Do you or your company need any kind of financial help? we offer all kinds of loan

Do you need extra cash to pay your bill or your working on a project

Mr Cameron

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used are both free Gmail addresses.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
Categories
Email Loan Scams

Loan Scammer – williamstanson117 gmail.com

Loan Scam Alert

Loan Scam – williamstanson117@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Williams Tonsan <jcarranza@cunamas.gob.pe>
Reply-To: Williams Tonsan <williamstanson117@gmail.com>
Subject:
X-Originating-IP: [105.112.98.155]

Email body

Loan Offer!! Do you need a loan? if yes, reply for more
information……. We offer private, commercial and personal loans at
interest rates as low as 2%. We give out loans ranging from $ 2000 to
$ 100 million.

IP Address Analysis

Header Analysis Quick Report
Originating IP: 105.112.98.155
Originating ISP: Celtel Nigeria Limited T.a Zain
City: Bénin
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email address it was sent from belongs to a Peruvian Government website and is most likely spoofed or has been hacked.
  3. The reply email address is a free Gmail address.
  4. The email was mass-mailed to many recipients using BCC
  5. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  6. The email originates for Nigeria, which is a known Advance Fee Fraud hotspot.
  7. The ridiculous upper amount of loan being offered and low interest rate.
Categories
Email Loan Scams

Loan Scammer – mzansicashloans gmail.com

Loan Scam Alert

Loan Scam – mzansicashloans@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: john marius <bdfinancetrustptyltd@gmail.com>
Reply-To: bdfinancetrustptyltd@gmail.com
To: undisclosed-recipients:;
Subject:

Email body

We know how hard it is to get a loan when you really need it, that’s why we offer instantly loans to everyone, whether you are having credit problems. We are sure of guaranteeing you your desired loan.

We offer this following loans;

Personal Loan
Consolidated Loan
Auto Loan
Car loan
Small Business Loan
Payday Loan
Home loan

Loans available from R20 000 to R850 000 000, If you want it, we will finance it immediately.
“OUR LOANS ARE PAID SO FAST, YOU CAN SET YOU WATCH TO IT”

Email:
mzansicashloans@gmail.com

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used are both free Gmail addresses.
  3. The email was mass-mailed to many recipients using BCC.
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  5. The email appears to be targeting South Africans, but was received by someone in the UK.
  6. The ridiculous upper amount of loan being offered.
Categories
Email Loan Scams

Loan Scammer – Community Credit Union

Loan Scam Alert

Loan Scam – info.mycccu@financier.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Community Credit Union <info.mycccu@financier.com>
To: Doug Davis <dd@vedamedrcm.com>
Subject: Loan offer
Received: from [160.152.3.194] ([160.152.3.194]) by 3c-app-mailcom-lxa11.server.lan (via HTTP); Fri, 18 May 2018 22:50:53 +0200

Email body

Christian Community Credit Union
101 S. Barranca
Covina, CA 91723
USA
www.mycccu.com

Hello ,

Are you confuse on what to do ?

Do you need extra cash to pay your bill or your working on a project we can help you with the financial help you need

For more information kindly send us email on the amount you need the year you will pay back the loan and your phone no

Mr Paul West

IP Address Details

Header Analysis Quick Report
Originating IP: 160.152.3.194
Originating ISP: Smile-nigeria-as
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used is a free email address.
  3. The email was mass-mailed to many recipients using BCC, with a different email address in the To: field
  4. The “lender” claims to be in the USA, but is sending emails from Nigeria, which is a known scam hotspot.

The website www.mycccu.com is a legitimate domain that has nothing to do with the scam, the scammer just quotes it to appear legitimate. All of the contact details on the website are different to those used by the scammer.

Categories
Email Loan Scams

Loan Scammer – alliancetrustcompany01 gmail.com

Loan Scam Alert

Loan Scam – alliancetrustcompany01@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: INSTAGATT PAYMENT OFFICE <instagatt1@gmail.com>
To: undisclosed-recipients:;
Subject: GET A LOAN WITHOUT COLLATERAL

Email body

GET A LOAN WITHOUT COLLATERAL

Do you need Personal Loan?
Business Cash Loan?
Unsecured Loan
Fast and Simple Loan?
Quick Application Process?
Approvals within 24-72 Hours?
No Hidden Fees Loan?
Funding in less than 1 Week?
Get unsecured working capital?
Contact Us At : alliancetrustcompany01@gmail.com

Why is this a loan scam?

  1. It was sent from a totally different email address to the one that you are asked to reply to.
  2. The email addresses used are both free Gmail addresses.
  3. The email was mass-mailed to many recipients using BCC
  4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.