Fake banks, couriers, law firms, escrow and other fake sites used in scams.
by Ghanageria Thu Aug 02, 2018 11:09 am
from: Federal Reserve Bank <[email protected]>
reply-to: [email protected]
date: Thu, Aug 2, 2018 at 3:03 PM
subject: CONTACT THE PAYING BANK IMMEDIATELY.

We write to acknowledge the receipt of your email and also express our since sympathy for the delay of your payment and all the inconveniences and infliction that you might have gone through in the past while trying to receive your fund.

I have some great news for you, your fund $10.5Milion have been endorsed and approved for release to you either through an online bank to bank transfer or through a certified bank check delivery, A payment advise has been issued in your favor to our affiliated bank( US METRO BANK) for them to handle your funds release. your payment is now being processed by the US METRO BANK and shall be released to you accordingly as soon as you open up full and official banking communication with the US METRO BANK.

Kindly make contact with the US METRO BANK through their email contact to enable them open an official banking communication with you towards the issuing of the release of your delayed payment through any of the above payment option once you fulfill their banking requirement for the release of the payment to you. See below contact details of the bank and person to contact:

BANK: US METRO BANK
PERSON TO CONTACT: MR. GORDON E. PETERS
EMAIL: [email protected]

Urgently make contact with the bank through their email at [email protected] and also endeavor to keep us informed as soon as you do, I shall monitor your funds release from here to enable the realization of your payment release after this long wait.

Your urgent attention to this email shall be highly to your own advantage.

Thanks for your cooperation.

Kind regards,
Christopher Wilson.

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
Advertisement

by Ghanageria Thu Aug 02, 2018 11:11 am
Full Headers:

Received: by 2002:a17:90a:170b:0:0:0:0 with SMTP id z11-v6csp2167331pjd;
Thu, 2 Aug 2018 08:03:12 -0700 (PDT)
X-Received: by 2002:a19:ebd7:: with SMTP id f84-v6mr2067179lfk.18.1533222192669;
Thu, 02 Aug 2018 08:03:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1533222192; cv=none;
d=google.com; s=arc-20160816;
b=wYf2yo74lCZwUEEiQyETXenTFEOTTm90eq8+1zPig1uVbXYFdgS79GoQM6y27a1hD8
cs/82x5b20FzaPIox5P8xJ59G1CtM37VaIHbthCZCESJrHMkcB6uZIg7Xx13d97Ny6zD
VP6QkpQfQie1bcV6pd86oo+C75JvwlavON7SX9kwJRJcAF3WUp6EQesgh6EwTEX+qvbQ
4PGzwSNUdnSHjOMgnFdMYBezh9S57kO5wdZE7yRVqZ94ttR8Ckh4KpPSypy5LOtC5fDw
9dEBwqE95uOWptAIVDNHqlHuGaO0YQqdh2bQIoco/D6oEJmTHtoEHCSeADCH0sj2pEaS
3NXg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature:arc-authentication-results;
bh=MUpOUixzz9+3Zx7p5tlSFvbnLmw+lHCMK2Gywxic0yA=;
b=pcgXUTVcUhWBSginYSkpzw6xE3Cn3tJVOqnq8DB4sLANyFmp6xaj9ksc6BUH3+nvN7
8SWMfVri4R/ejczBEh40Zfuw/COJdJ4jyzyfyE1l8sfVhGfLNrze/cgOupzdZT3vVwd/
9qKwYcPOcaGdMd/B57bh3UyXdfj9FkYxais3OmpsQOmx9+Db77Vy5VRSmYMLteViQt24
8c82Hyx4mkREE2f2fjFjRMPsFN11/yctkcolxZdfOfTpfnubYGSQNR7jH4mvheqI0g5N
OpNT37MZNHmy4wgokXKwkCrn4OqGFkZp+PPwNs/pwVvIm7AXSpeEPC5NsBZSWhIzyMIC
1y3A==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=20161025 header.b=cU29Gijz;
spf=pass (google.com: domain of [email protected] designates 209.85.220.65 as permitted sender) [email protected];
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <[email protected]>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])
by mx.google.com with SMTPS id u12-v6sor495846ljh.65.2018.08.02.08.03.12
(Google Transport Security);
Thu, 02 Aug 2018 08:03:12 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=20161025 header.b=cU29Gijz;
spf=pass (google.com: domain of [email protected] designates 209.85.220.65 as permitted sender) [email protected];
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=MUpOUixzz9+3Zx7p5tlSFvbnLmw+lHCMK2Gywxic0yA=;
b=cU29GijzuogZ7uqe4qMpIkle8JGPVmI2W3kIOLq09bAubi+qVk465SkxsiysoT2d5j
t/xINf4NeInCUJ9W4At89vG4gsHQzEp8QxBbRVN4KcgecGQIBR9Y1Z8gYI1kNGwWyqoT
qSpQeLpDViEWV2Cd0hqzWkUUg0FgNT9u7UCDakw3qcn9gtbX+ur4fUWZhcjyypAGKzKu
EMD188LOJt8UCDh0B+1RsKU4ZzJtqrWrWyVOtC5dmezlaLib1myq0F72czLWLSYBC6JE
zSdbM4fo9hAXTTvKdxq6Y0jibQk3zTdjbIGKpSdkmSEUEEFlEQJaiwTPLx2HL9hkgJnv
YcYg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=MUpOUixzz9+3Zx7p5tlSFvbnLmw+lHCMK2Gywxic0yA=;
b=dIyHqjdZK28MGq2VdPgd8fbJ28uca7Mm8EtyvhT55OrN+KsFZwqAB5EmV82ahTKazR
7hRf5GgqBdu2aLLYXVvwO3nW1KijFJM0ewRVowZ5Lf0doIQ1UJn3PtXNJU30mwv/f2SW
92PMdbsHLdY6mdDuG2K4Gxlp2UU9biUZXxI8N1GXb+w6unohq2CiaGecGyU3HEv67aqW
fIPzRshUzs6YnO7fDjMXtKYy27iwuDZ6krPPv/vJnni3tJVF/pYtsaEof0o5GMjSRYQm
ZRUryEGY28t6cyerjhMdDBBN/NzQju6NXTtMNcvWi2Coh6YXYG9Y1uQoxp7+SYF988v4
iUrA==
X-Gm-Message-State: AOUpUlFUF74ROjpuiACVAL0AHhpo4LwQR9zYiWVa86EBGxBfSbPse9ov ihH2/uWWzZ8mew3uTa0W6l4KMLGRG0Lv/UMkdqH3vQ==
X-Google-Smtp-Source: AAOMgpfbgeFZsFVAdL+7/pP8tUuFEd91DD0k3BYpjnlzmL600hmTrlRsO3C1IK4Z76JFypnrR8QgGneRxS8aliQJIYI=
X-Received: by 2002:a2e:5b4a:: with SMTP id p71-v6mr2445437ljb.91.1533222191893; Thu, 02 Aug 2018 08:03:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a19:e598:0:0:0:0:0 with HTTP; Thu, 2 Aug 2018 08:03:11 -0700 (PDT)
Reply-To: [email protected]
From: Federal Reserve Bank <[email protected]>
Date: Thu, 2 Aug 2018 16:03:11 +0100
Message-ID: <CAMLLKMJ_TVZtf3wkaQ0b+z1__m5JyOKpV-D=TJ0gJsgftsHnGw@mail.gmail.com>
Subject: CONTACT THE PAYING BANK IMMEDIATELY.
Content-Type: multipart/alternative; boundary="0000000000001c10800572751c0f"

--0000000000001c10800572751c0f
Content-Type: text/plain; charset="UTF-8"


We write to acknowledge the receipt of your email and also express our
since sympathy for the delay of your payment and all the inconveniences and
infliction that you might have gone through in the past while trying to
receive your fund.

I have some great news for you, your fund $10.5Milion have been endorsed
and approved for release to you either through an online bank to bank
transfer or through a certified bank check delivery, A payment advise has
been issued in your favor to our affiliated bank( US METRO BANK) for them
to handle your funds release. your payment is now being processed by the US
METRO BANK and shall be released to you accordingly as soon as you open up
full and official banking communication with the US METRO BANK.

Kindly make contact with the US METRO BANK through their email contact to
enable them open an official banking communication with you towards the
issuing of the release of your delayed payment through any of the above
payment option once you fulfill their banking requirement for the release
of the payment to you. See below contact details of the bank and person to
contact:

BANK: US METRO BANK
PERSON TO CONTACT: MR. GORDON E. PETERS
EMAIL: [email protected]

Urgently make contact with the bank through their email at
[email protected] and also endeavor to keep us informed as
soon as you do, I shall monitor your funds release from here to enable the
realization of your payment release after this long wait.

Your urgent attention to this email shall be highly to your own advantage.

Thanks for your cooperation.

Kind regards,
Christopher Wilson.

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
by Ghanageria Thu Aug 02, 2018 11:12 am
Domain Name: usmetrosa.com
Registry Domain ID: 2221118494_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2018-01-30T19:59:52Z
Creation Date: 2018-01-30T19:59:52Z
Registrar Registration Expiration Date: 2019-01-30T19:59:52Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registrant Organization:
Registrant State/Province: Abuja
Registrant Country: NG
Registrant Email: Select Contact Domain Holder link at
https://www.godaddy.com/whois/results.a ... etrosa.com
Admin Email: Select Contact Domain Holder link at
https://www.godaddy.com/whois/results.a ... etrosa.com
Tech Email: Select Contact Domain Holder link at
https://www.godaddy.com/whois/results.a ... etrosa.com
Name Server: NS19.DOMAINCONTROL.COM
Name Server: NS20.DOMAINCONTROL.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Registrant Country NG
Registrar GoDaddy.com, LLC
IANA ID: 146
URL: http://www.godaddy.com
Whois Server: whois.godaddy.com

(p)
Registrar Status clientTransferProhibited, clientUpdateProhibited, clientRenewProhibited, clientDeleteProhibited
Dates 184 days old
Created on 2018-01-30
Expires on 2019-01-30
Updated on 2018-01-30

Name Servers NS19.DOMAINCONTROL.COM (has 50,131,834 domains)
NS20.DOMAINCONTROL.COM (has 50,131,834 domains)


Tech Contact —
IP Address 23.229.233.100 - 84 other sites hosted on this server

IP Location United States - Arizona - Scottsdale - Godaddy.com Llc
ASN United States AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US (registered Oct 01, 2002)
Domain Status Registered And Active Website

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
by Ghanageria Thu Aug 02, 2018 11:25 am
The fake bank website is www.usmetrosa.com is registered to a Nigerian scammer.

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.

Who is online

Users browsing this forum: ClaudeBot and 7 guests