Categories
Email Loan Scams

Loan Scammer – Zenith Finance Corporation

Loan Scam – citie.bank@nycmail.com & citi.bank.nyc@citromail.hu

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [102.89.2.244]
From: city bank <citie.bank@nycmail.com>
To: [REDACTED - Not my emil address]
Subject: Please Reply Urgently

Email body

HI,
WE AT ZENITH FINANCE CORPORATION (ZFC} WOULD LIKE TO INFORM YOU ABOUT OUR OFFER OF LOANS FOR THIS SEASON.
WE PROVIDE A LOAN AMOUNT FROM USD5,000 TO USD150,000,000 FOR A PERIOD OF 1 TO 35 YEARS.
IF YOU ARE INTERESTED PLEASE LET US KNOW.
YOUR REQUEST WILL BE PROCESSED WITHIN 72 HOURS.

YOU CAN CONTACT US AT:
citie.bank@nycmail.com
citi.bank.nyc@citromail.hu
THANKS.

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 102.89.2.244
Originating ISP:
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • The email addresses used are free email addresses.
  • The email was mass-mailed to many recipients using BCC.
  • The email indicates that it is from Zenith Finance Corporation, but the email addresses used both have Citi Bank in the name.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.
Categories
Email Loan Scams

Loan Scammer – Armanda Manidath

Loan Scam – armandamanidath@gmail.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

Received: from [192.168.43.104] (unknown [105.112.109.136])
Subject: Loan Offer
To: Recipients <acastaneda@consorciolp.com.pe>
From: Armanda Manidath <acastaneda@consorciolp.com.pe>
Reply-To: armandamanidath@gmail.com

Email body

Good day, we at Zenith Finance Corporation wish to inform you about our Loan Offer’s for the ember season.
We grant loan amount from the sum of 10,000 USD to 20,000,000 USD.
If you are interested, kindly let us know, your request will be granted withing 48hrs.

Thanks

Armanda Manidath
Marketing Manager
Zenith Finance Corporation

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 105.112.109.136
Originating ISP: Celtel Nigeria Limited T.a Zain
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header 
  goto ipTRACKERonline

Why is this a loan scam?

  • It was sent from a totally different email address to the one that you are asked to reply to.
  • The email address used is a free Gmail address.
  • The email was mass-mailed to many recipients using BCC.
  • The email gives no indication of where the company offering the loan are based or who they are regulated by.
  • The ridiculous upper amount of loan being offered.
  • The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.