Categories
Email Loan Scams

Loan Scammer – ZFC Finance Corporation

Loan Scam – armandamanidath@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Bruno Olivieri <bruno.olivieri@comune.settimo-torinese.to.it>
Reply-To: armandamanidath@gmail.com
Subject: ZFC Loan Offer
X-Originating-IP: [105.112.101.236]

Email body

Hello, we at ZFC Finance Corporation would like to
inform you about our offer of loans for this season. We provide a loan
amount from $10,000 to $USD 50,000,000 for a period of 1 to 35years.
If you are interested, please let us know, your request will be processed within 48 hours.

Thanks
Marketing Manager

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 105.112.101.236
Originating ISP: Celtel Nigeria Limited T.a Zain
City: Enugu
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Gmail address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of where the company offering the loan are based or who they are regulated by.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Armanda Manidath

Loan Scam – armandamanidath@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [192.168.43.104] (unknown [105.112.109.136])
Subject: Loan Offer
To: Recipients <acastaneda@consorciolp.com.pe>
From: Armanda Manidath <acastaneda@consorciolp.com.pe>
Reply-To: armandamanidath@gmail.com

Email body

Good day, we at Zenith Finance Corporation wish to inform you about our Loan Offer’s for the ember season.
We grant loan amount from the sum of 10,000 USD to 20,000,000 USD.
If you are interested, kindly let us know, your request will be granted withing 48hrs.

Thanks

Armanda Manidath
Marketing Manager
Zenith Finance Corporation

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 105.112.109.136
Originating ISP: Celtel Nigeria Limited T.a Zain
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Gmail address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of where the company offering the loan are based or who they are regulated by.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams Slovak

Loan Scammer – Larry Fox

Loan Scam – info@24hourservce.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [192.168.0.165] (unknown [105.112.100.31])
Subject: Naliehavo potrebujete peniaze, aby ste sa dostali z dlhov?
To: Recipients <r.vladev@iara.government.bg>
From: Larry Fox <r.vladev@iara.government.bg>
Reply-To: info@24hourservce.com

Email body

Vitajte v službe požiciavania na 24 hodín

Skúšali ste bez úspechu získat pôžicky od bánk? Naliehavo potrebujete peniaze, aby ste sa dostali z dlhov? Potrebujete peniaze na rozšírenie alebo založenie vlastnej firmy? Získajte pôžicku od jednej z popredných britských pôžickových spolocností. 24Hour Loan Service je jednou z najväcších spolocností so zabezpecenými pôžickami vo Velkej Británii a náš priatelský a skúsený personál je schopný vašu žiadost vybavit rýchlo a efektívne. Môžete si požicat na akékolvek obdobie od 1 do 25 rokov a požicat si lubovolnú sumu od 2 000,00 GBP do 100 000 000,00 GBP na akýkolvek úcel.

Medzi typy pôžiciek, ktoré ponúkame, patria:

Osobné pôžicky
Krátkodobé pôžicky
Pôžicky na konsolidáciu dlhov
Online pôžicky
Rýchle pôžicky
Bezúcelové pôžicky
Podmienky pôžicky
Pôžicky so zlým úverom
Lacná pôžicka
Nepriaznivé úverové pôžicky
Pôžicka na bývanie
Zlé úverové problémy
Zabezpecená pôžicka

S nízkou úrokovou sadzbou 3% vo všetkých castiach sveta. Aplikácia je k dispozícii pre uchádzacov, ktorí majú 18 rokov a viac.

S pozdravom

Webové stránky: 24hourservce.com
e-mail: info@24hourservce.com
larryfox2017@hotmail.com
Císlo Whatsapp: +447451283532

English translation

Welcome to the 24-hour rental service

Have you tried unsuccessfully to get bank loans? Do you urgently need money to get out of debt? Do you need money to expand or start your own business? Get a loan from one of the UK’s leading lending companies. 24Hour Loan Service is one of the largest secured lending companies in the UK and our friendly and experienced staff is able to process your application quickly and efficiently. You can borrow for any period from 1 to 25 years and borrow any amount from GBP 2,000.00 to GBP 100,000,000.00 for any purpose.

The types of loans we offer include:

Personal loans
Short-term loans
Debt consolidation loans
Online loans
Quick loans
Purposeless loans
Terms of the loan
Bad credit loans
Cheap loan
Adverse credit loans
Housing loan
Bad credit problems
Secured loan

With a low interest rate of 3% in all parts of the world. The application is available for applicants who are 18 years of age or older.

Sincerely

Website: 24hourservce.com
e-mail: info@24hourservce.com
larryfox2017@hotmail.com
Whatsapp number: +447451283532

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 105.112.100.31
Originating ISP: Celtel Nigeria Limited T.a Zain
City: Enugu
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for 24hourservce.com

Creation Date: 2020-03-11T14:50:57Z
Registrar Registration Expiration Date: 2021-03-11T14:50:57Z

Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email addresses used are a free Gmail address and a domain that was anonymously registered lttle more than 6 months ago.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of who the lender is regulated by or their physical address.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Ray Jones

Loan Scam – info@lyteinvestors.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [105.112.20.116]
Reply-To: Ray Jones <info@lyteinvestors.com>
From: Ray Jones <info@lyteinvestors.com>
To: [REDACTED]
Subject: LOAN

Email body

Hello,

Are you in need of 100% Financing? I am a private lender. I do mortgage, businesss and personal Loans.

All loans at 3% Interest rate. Interested?

Regards

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 105.112.20.116
Originating ISP: Celtel Nigeria Limited T.a Zain
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for lyteinvestors.com

Creation Date: 2020-04-28T07:00:00Z
Registrar Registration Expiration Date: 2021-04-28T07:00:00Z

Registrant Name: Domain Administrator
Registrant Organization: See PrivacyGuardian.org

Why is this a loan scam?

  • The email address used is on a domain that was only registered 6 months ago by someone using a privacy service to hide their identity.
  • The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – providentinq yandex.ru

Loan Scam – providentinq@yandex.ru

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [172.20.10.3] (unknown [129.205.112.17])
Subject: RE:FINANCIAL AID
To: Recipients <mbarroso@ebc.gob.bo>
From: PROVIDENT LOAN <mbarroso@ebc.gob.bo>
Reply-To: providentinq@yandex.ru

Email body

Do you need 100% finance at 2% interest rate, be it urgent loan, emergency loan, or whatever loan we can help you, reply for more details.

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 129.205.112.17
Originating ISP: Globacom-as
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Yandex address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Desmond Hamans

Loan Scam – pyramidloansector@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [10.130.143.231] (unknown [129.205.124.139])
Subject: Dear Loan Seekers
To: Recipients <noreply@tic.gov.bf>
From: noreply@tic.gov.bf
Reply-To: pyramidloansector@gmail.com

Email body

Dear Loan Seekers

Pyramid Finance Ltd. extends long/medium term loans as well as short term loans for working capital.Have you been searching for Loan ? Have you been turned down by so many Banks? Do you need finance to establish your business ? Do you need finance for the expansion of your business ? We are a reliable loan company willing to loan out funds for personal and business purposes. We are the financial institutions that lends money to people with special situations,our loan ranges from personal to business loan.If you are facing monetary difficulties,or need finances to improve or start up a new business,then you have to search for solution from a reliable and reputable loan firm.Contact us today at: pyramidloansector@gmail.com

Our application procedures,processing of loan requests and fund transfer are done through online mode quickly and hassle-free ,please note that we offer small and long term loans !
Contact one of our reputable staff to meet your needs
Mr.Desmond Hamans .

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 129.205.124.139
Originating ISP: Globacom-as
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto 
  ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Gmail address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of where the company offering the loan are based or who they are regulated by.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Dhia Nayla

Loan Scam – nayla@cmbmutualfunds.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

To: [REDACTED]
Subject: Re: Personal & Business Relief (COVID-19)
X-PHP-Script: k5send.malaysia.escasount.biz/k5.php for 197.210.10.21
From: "Dhia Nayla [CBMF]" <nayla@malaysia.k5send.mypacmblease.com>
Reply-To: nayla@cmbmutualfunds.com

Email body

Hello,

I hope you are well. In these unprecedented times with the COVID-19, we want to support you as you navigate your personal or business situation and projects.

We have decided to tentatively reach you on [REDACTED] to inform you that we are currently providing debt relief/debit financing or credit facility for your personal or business project. Financing could reach a maximum of $300M USD at a 0.67% rate per annum with minimum documentation.

If you, or anyone you know, do require such financial relief of Credit Facility for Personal or Business do not hesitate to contact us before or by October 13, 2020

Thank you, and stay safe.

UMAR, Dhia Nayla

__________________________

CBMF Brokering
Kinrara Seksyen 1,
47180 Puchong, Malaysia

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 197.210.10.21
Originating ISP: Mtn Nigeria Communication Limited
City: Abuja
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for cmbmutualfunds.com

Creation Date: 2019-08-19T12:59:53Z
Registrar Registration Expiration Date: 2021-08-19T12:59:53Z

Registrant Name: Ramlan Hamzah
Registrant Organization: 
Registrant Street: Jalan Sp 1   
Registrant City: KL
Registrant State/Province: Wilayah Persekutuan Kuala Lumpur
Registrant Postal Code: 52100
Registrant Country: MY
Registrant Phone: +60.122776245
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: ramlanhamzah@hotmail.com

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is on a domain that was only registered a year ago, by someone giving only a partial address.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Wayne Group Ltd

Loan Scam – jeffreywayne65@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Wayne Group LTD <acessuas_aepeti@sabara.mg.gov.br>
Reply-To: Wayne Group LTD <jeffreywayne65@gmail.com>
Subject: Do You Need A Private Lender??
X-Originating-IP: [129.205.113.165]

Email body

I’m a private lender, we lend money to borrowers nationwide and a few other countries overseas seeking to start-up, contract/business funding, improve or upgrade their businesses at a very flexible Interest rate. Kindly reply for more info.

Regards,
Jeff.

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 129.205.113.165
Originating ISP: Globacom-as
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Gmail address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of who is offering the loan, where they are based or who they are regulated by.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email

Loan Scammer – Mr. J. Mohammed

Loan Scam – gulfinvestmentgroup001@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [197.242.114.213]
Subject: REF: Good Morning
To: Recipients <xzfordhkatr@azubi-stellenboerse.de>
From: "Mr. Mr. J. Mohammed" <xzfordhkatr@azubi-stellenboerse.de>
Reply-To: gulfinvestmentgroup001@gmail.com

Email body

Good Morning.

We are a financial service company and we facilitate loans and project financing for companies and private individuals with good project.

Our loan interest rate is between 2.5%-6.7% depending on your project type and loan duration.

Our loan processing collateral security application fee is USD2,850.00 (Two thousand eight hundred and fifty dollars) only and it is pre-paid to the insurance broker company before you can access the loan , once we issue the LOI, letter of acceptance / RWA and the loan term sheet.

I can be reached on +971554845309 and also you can send a whatsup message on this number.

Do not respond if the above fee schedule is not acceptable to you.
Stay safe , while i expect your email and call.

Sincerely
Mr. J. Mohammed
Gulf Investment Group

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 197.242.114.213
Originating ISP: Spectranet
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Gmail address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of where the company offering the loan are based or who they are regulated by.
  • The email indicates that an upfront fee is required. Legitimate lenders do not do this, any fees are added to the amount of the loan and not paid separately by the borrower.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Baldwin Brokers

Loan Scam – service@baldwinbrokers.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Subject: Contact Us Today
To: Recipients <service@brokersfirm.host>
From: service@brokersfirm.host
Reply-To: service@baldwinbrokers.com

Email body

We are International brokerage firm, specialized in helping individuals and businesses access funding.
We are Baldwin Brokers, your complete financial solution whenever you are looking for personal loan or funding for your business.
With us, you can access funds of up to USD500 million for either start up or already existing projects. We offer funds for as low as 3% interest rate per annum.
contact us for more details:
service@baldwinbrokers.com

WhoIs details for baldwinbrokers.com

Creation Date: 2020-06-28T14:40:56Z
Registrar Registration Expiration Date: 2021-06-28T14:40:56Z

Registrant Organization: VixiBank Inc
Registrant State/Province: lagos
Registrant Country: NG

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is on a domain that was registered only 2 days ago by someone in Nigeria.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of where the company offering the loan are based or who they are regulated by.
  • The ridiculous upper amount of loan being offered.
  • The email has links to Nigeria, which is a known Advance Fee Fraud hotspot.