Loan Scam – lucasduru2020@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [197.211.61.107]
Subject: Attention:Customers
To: Recipients <noreply@thulir.my>
From: noreply@thulir.my
Date: Tue, 24 Mar 2020 02:38:33 -0700
Reply-To: adugold@ymail.com

Email body

Attention:Customers

Are you in need of loan to complete your pending projects?, We are
based in Ghana and you need to contact us and come with the contract
evidence documents then we can finance it.

Granting our clients Loan with Maximum Security is our priority, so we
would need your personal data which would enable us process your loan
which would be transferred to you as soon as you are ready to comply
with the terms and conditions of (ENERGY BANK GHANA LIMITED).
Usually to start up the loan process, you will have to accept the
terms and conditions, which would be sent to you as soon as you show
your interest in getting the Loan.

The services of (ENERGY BANK GHANA LIMITED) are rendered all over the world.
All you need to do is comply with our rules and regulations and
provide us with your correct details and contact address to be able to
prepare our terms and conditions ,so far so good we have had most of
our clients paid us back our money in due time while some have given
us fake and incorrect identities, with the intention of going with our
money.

Our Terms and conditions would be prepared for you shortly after you
have filled in your personal details.

To enable us prepare the terms and conditions, you will have to
provide the following details:

NAME:
AGE:
SEX:
MARITAL STATUS:
CONTACT PHONE NUMBER:
ADDRESS:
CITY:
STATE:
COUNTRY:
ZIP CODE:
OCCUPATION:
MONTHLY INCOME:
AMOUNT NEEDED:
FULL BANK DETAILS:
WHEN NEEDED:
PURPOSE OF LOAN:
BANKRUPT OR NOT:
REPAYMENT DURATION:

We await your swift reply to this e-mail:lucasduru2020@gmail.com

Regards,
Mr Lucas Duru

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 197.211.61.107
Originating ISP: Globacom-as
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header
  goto ipTRACKERonline

Why is this a loan scam?

• It was sent from a totally different email address to the one that you are asked to reply to.
• The email address used is a free Gmail address.
• The email was mass-mailed to many recipients using BCC.
• The email claims that the lender is located in Ghana, but it originated from Nigeria, which is a known Advance Fee Fraud hotspot.