Loan Scam – info@crownsfinance.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Crowns Finance <y0894@yuanhosp.com.tw>
Reply-To: Crowns Finance <info@crownsfinance.com>
Subject: 
X-Originating-IP: [197.211.61.74]

Email body

Benötigen Sie einen Kredit, um Ihr Geschäft zu erweitern oder um persönliche Rechnungen zu bezahlen?
Senden Sie eine E-Mail an: info@crownsfinance.com; für weitere Informationen über dieses Kreditangebot zu sehr niedrigen Zinssätzen.

Do you need a loan to expand your business or to pay for personal bills?
Send an e-mail to: info@crownsfinance.com; for more information on this loan offer at very low interest rate.

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 197.211.61.74
Originating ISP: Globacom-as
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

The domain crownsfinance.com has no website set up, it is purely used for emails.

WhoIs details for crownsfinance.com

Creation Date: 2018-05-25T14:29:41UTC
Registrar Registration Expiration Date: 2019-05-25T14:29:41UTC

Registrant Organization: Sales
Registrant State/Province: Anthens
Registrant Country: GL

Why is this a loan scam?

1. It was sent from a totally different email address to the one that you are asked to reply to.
2. The email address used is on a fake domain that is only 4 months old and registered using inconsistent details.
3. The email was mass-mailed to many recipients using BCC.
4. The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
5. The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.