Fake banks, couriers, law firms, escrow and other fake sites used in scams.
by Ghanageria Fri Aug 17, 2018 2:04 am
from: HSBC Bank <[email protected]>
date: Thu, Aug 16, 2018 at 8:39 PM
subject: Payment Advice
mailed-by: link.cuhk.edu.hk
signed-by: mycuhk.onmicrosoft.com

The attached payment advice is issued at the request of our management. The advice is for your reference only.

Kindly download here HSBC Payment Advice Ref(799348) https://yinegpoplogin.usa.cc/sep/index.php? and also check your bank account to confirm payment.

Should you have any enquiry or require assistance, please contact the sender (our customer) at the contact number stated in the attached advice.

Best Regards,
Customer Service Manager
*HSBC Bank plc*

---

Received: by 2002:a17:90a:170b:0:0:0:0 with SMTP id z11-v6csp2423992pjd;
Thu, 16 Aug 2018 13:40:00 -0700 (PDT)
X-Google-Smtp-Source: AA+uWPwXdDG8xhBAixMrZA8Jm3JOqAMitE++Nw3r9vXj/9LTTu1SD7F26M69TaCbjmCtTyteRFwP
X-Received: by 2002:aa7:86d7:: with SMTP id h23-v6mr33781853pfo.132.1534452000308;
Thu, 16 Aug 2018 13:40:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1534452000; cv=none;
d=google.com; s=arc-20160816;
b=TEIsYsNhIBqv3gxYS344dF8YXmfgIoVApVEYI+CwfAJm3sAPXfyEJtYiFHo3Ye7LCa
hxvvaJAr5eKhxfryLfNtPo7Gh0UXDa00zoWA01plv7xbxLN4JTgW4Hl9ePgYjHd2vUXd
NDFWRBY+WVKC1ch8hsvxtZn36RkGuqkHM5HH0za5IGamUQfJlXoViWi+RLhlyLmbNZQb
EARfSjiLw7k8Uy3/EJfwFvqdku3GX44FyFt1vXk2WYvzdyYsn4jqzKQoWMJDAzjRNOL0
yRAe5Ib2LePMCG2qWQNPY55I3HXQWrwdx6S5fDJNF5HH/U9/kDW1AbiLaVbNzSE2eCBl
p3TA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=spamdiagnosticoutput:content-transfer-encoding:mime-version
:message-id:date:subject:to:from:dkim-signature
:arc-authentication-results;
bh=Ga4nGehVRp3tXsl7cJpULVE1kFhZTSy+TYn7bdFijl0=;
b=uZO8aDnQcQW1fDlQMlLLrfpMOtdh2t5bNXK9pw1KNfMTACWZAoQ5tEWUMgDxgp6RlH
Y2a59w/E9OyYc/QYOrA4kiH+HGTLmLatLNNo53a8s5beZgw/nlst4I4kOLGTRkuHILXZ
18aoQvvh8r2IaOdMpsm3xldmMTOjSZFxMFWPsYiAAnB60mGHsq0P2bop0o6qn2PT3GwR
Ql/j+EboKAlspWKBPqklqlreiv5R+TMgQf+SKFgySmkJr8oZWbCQkfd9u1yzVrx4WuJx
tvuPr012YxMkGPFG7/Vaiyo3PTXQNBQPk/lMAsoLfAEp7bcYbMdTiTq4WftmvgehrzHk
HRmg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=selector1-link-cuhk-edu-hk header.b=I2iyRE0w;
spf=pass (google.com: domain of [email protected] designates 104.47.124.220 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01hn0220.outbound.protection.outlook.com. [104.47.124.220])
by mx.google.com with ESMTPS id m13-v6si254185pgh.360.2018.08.16.13.39.59
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 16 Aug 2018 13:40:00 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 104.47.124.220 as permitted sender) client-ip=104.47.124.220;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=selector1-link-cuhk-edu-hk header.b=I2iyRE0w;
spf=pass (google.com: domain of [email protected] designates 104.47.124.220 as permitted sender) [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mycuhk.onmicrosoft.com; s=selector1-link-cuhk-edu-hk; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ga4nGehVRp3tXsl7cJpULVE1kFhZTSy+TYn7bdFijl0=; b=I2iyRE0wHhk1+UbOkP+6A1f3pFo1Wm6inSPR5l5oLBeh/LW6rHHfT7Hzy4mVWM5iRp9t0LjHd4eGZX580yuRTlfXnv1WjyI9dfUxINmrcAF7CXJp2k6NIMMwKrwkXVuq64CykyjfmmPx4ulv3whyfm9dXhD25g6/k/nJbnahnqs=
Received: from link.cuhk.edu.hk (35.170.55.118) by SG2PR03MB0250.apcprd03.prod.outlook.com (2a01:111:e400:b422::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1080.8; Thu, 16 Aug 2018 20:39:57 +0000
From: HSBC Bank <[email protected]>
Subject: Payment Advice
Date: 16 Aug 2018 20:39:42 +0000
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [35.170.55.118]
X-ClientProxiedBy: DM3PR08CA0022.namprd08.prod.outlook.com (2603:10b6:0:52::32) To SG2PR03MB0250.apcprd03.prod.outlook.com (2a01:111:e400:b422::12)
Return-Path: [email protected]
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: de548be5-c1a8-42a0-629d-08d603b86eac
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(2017052603328)(7153060)(7193020);SRVR:SG2PR03MB0250;
X-Microsoft-Exchange-Diagnostics: 1;SG2PR03MB0250;3:jPu37YgAthszeP88mO3EKJJAKsugU1pstgI5J0st44dA20fLYQPZfkEeimDiXzUD58+E+6SVHugOx5JgKVrq8TnzY9FqUrY0EueKMFqzUgYjL6pA6+TJu4ldorAxpb+CMgymso5fjqYo1eEtkOdLcsbGQ2oN/xEk4huHQakqzOhosHfymSaRojr5r9cEb1gHEtuyIQHcDIU1j6u2nDOkZzad16aPWmofdRMq8lfkkm4kBAerbvyNQzp90SQXZAQi;25:YGAY2oe/+W2mh6ketpDcWt841zEqZ/udZT8X++FhtDIbPZGF0/k5c52MZlI0shc4yRNX/odxb7HZphXjsFIo8sBvVfI9loVGSfB58Jc6EDaQ71gHhleS79IbKw/Ohu341plmHT2lLvm7cyQR6cItEii2wdsyQ4ThgUOkZ2KT7lC5KL+EWD5pUKNQRRfkR7UUe9BU7lcMwkcnTkUpPt3aqPWK0RhuTgbJ1JYAsCQlrQhJJJNCJhC8t0VcnH2+u4K08vDhjVwpz3CX3R9N6SZHpYiDhOx/8dQh8/YpOXqy1YsWvfk6rSSAWJME36Y4yvrq/abAQMfSMlOvCEui7/qyTA==;31:oQHmyCzlX7cITRp//ZfecjOeez24iCMWfK8z1aoBirTXcrOGiKPpVnNNb6lAscWWVvpvEmTcqsjOdUDY6B4BmebrQKvreZd2x6xJpvVLO0CHYkgKFy/Hp2z4luXO1u1y70/ECdEBDko3xpckfFAFqdTs2qhXbn88tuUwTFWn7YG/TEz4Xk8yDuWkJmxloEdEXVmqSuXShbzwkjRygx5VkQHl6ymBRRHNAaX4Rozr0bE=
X-MS-TrafficTypeDiagnostic: SG2PR03MB0250:
X-Microsoft-Exchange-Diagnostics: 1;SG2PR03MB0250;20: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;4:Vrv9JAFfdfplBl5CNiLr0aFbH2ganPN3JxVll+VuyNCSDuuD3T8gD/1v5a5BbTRPjS+Xyu/7/93CeuEFIsFZ5xJczm1MLBil6uTB0MD469QamiKS3njHrbLOv1v0dx8UnOiHSeZCj4iCpZMVS6SbRAMamZDgLXsvvY2CzTLW4DjVQLVvJ+5//l05nuA1eWhgd0rIOlN8gSB12Qep0n1dPPtrvbmzCC7Gmr/NrVm58jMsEG4FAldViEJ1Mrm3rnbvghIr5GdrOHo7BMVRyyAan89xk1FoatWaF1NRze2xPtpYAGUJFVPiPd+ENk4hl3tFqSv2NHOOsYFoKniANtjQ0YZ+1n1jJ0jL/dZIEUAqdLSHlnOw04EVk6aFiI0chI7Q
X-Microsoft-Antispam-PRVS: <SG2PR03MB0250CB24DD13C6923A4EA8E2E73E0@SG2PR03MB0250.apcprd03.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(85827821059158)(105169848403564)(217945515857101);
X-MS-Exchange-SenderADCheck: 1
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(20180801012)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231311)(944501410)(52105095)(149027)(150027)(6041310)(201703131423095)(201702281529075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(201708071742011)(7699016);SRVR:SG2PR03MB0250;BCL:0;PCL:0;RULEID:;SRVR:SG2PR03MB0250;
X-Forefront-PRVS: 07665BE9D1
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(376002)(136003)(346002)(366004)(396003)(39860400002)(199004)(189003)(10290500003)(6916009)(39060400002)(575854001)(23756003)(25786009)(6666003)(54836003)(478600001)(2616005)(10770500004)(15650500001)(66066001)(33656002)(88552002)(956004)(476003)(10130500003)(7116003)(347745004)(5660300001)(413944005)(12747405002)(2906002)(1076002)(105586002)(106356001)(8936002)(8746002)(3480700004)(9240055007)(103936005)(7736002)(5024004)(386003)(49552006)(14444005)(6116002)(26005)(16526019)(6346003)(16799955002)(186003)(3846002)(53416004)(69596002)(74482002)(2351001)(4743002)(316002)(786003)(236005)(6306002)(2361001)(55016002)(53936002)(97876018)(606006)(8676002)(81156014)(23846002)(55046002)(7696005)(81166006)(68736007)(52116002)(486006)(50466002)(97736004)(8266002)(520100003);DIR:OUT;SFP:1501;SCL:5;SRVR:SG2PR03MB0250;H:link.cuhk.edu.hk;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;A:0;MX:1;
Received-SPF: None (protection.outlook.com: link.cuhk.edu.hk does not designate permitted sender hosts)
Authentication-Results: spf=none (sender IP is ) [email protected];
X-Microsoft-Exchange-Diagnostics: 1;SG2PR03MB0250;23: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
X-Microsoft-Antispam-Message-Info: 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
X-Microsoft-Exchange-Diagnostics: 1;SG2PR03MB0250;6:iFb1bA6iDb7PYOrs+w7dQBtvJnHVIth+Awaq0a33T8EEhWIhuvP37k2K0xzVW7ScxtH6dA471xead+4v3YiK/BgoP+M9xwMCwsnoQf4tRLAjLrblVZHotLXn9Kcu2FvDcgI5LWiNSfOsyXyrgynQUIlRbjSWu77LJXSmBQfvP70oii5y8iw8HqcLqlDSzYC2x64oF/Rf6ajCitfXirc1skzbkvpp05h/4GS1TFufZ40yjhhqedzyN9XuVrQkY+bjPZ7MlaarHvBpq+KfiIX27CGPoeM4lxi4fekO4FocNqvqQ46+y4imdOxZTr2CYXSI41e4A1nymlfRMJpke8WY5E8muMNJcpsbHMi063WKS++7A/EUVLe0rUTIMG7sSfkxPeQW7Ak9nE+jTQmQ8ggKO/DbEtKYbvrHnGuFoTYWR4XU/arSiXahtf2SKIlt5wAfeFwkrOs6U5xJf0zoyII/7Q==;5:ZRI7YCqlwCDzP5HbCyVseRpOzSQ/dJpsrBSplNVqf8h/TBTp72XrmlWOxdwVvsT6YdHY+z6SCeRjJZ8y/mji32z+IHlcKB05gN53i7I20QxTO0v6T6gjVJ5KIDfK0giAhZvPhGiirK24lC4yY2RT3pRXcYSI8iaoJtz5H05WHEU=;7:JA+RhADuxDjFm1hu349k+PC2xpK+IP34wtXVYL9IWa0RD2uZGmXkgaxiN2H2HLjRnO7bw3y96+ka+QPRKJU7/dP6pmhcqxECOnRGoRdtzrXBDqVULHkGtjOWu6tP1bI73ZJlt5ENS1nS3t6Xyq7TbOc6KFgATAqx/ehrEnGZB1coMjqSxP2V5W2ffX32FE8NiL6ic20DMfoVGv9oVuQq18DfnTmTrSqukKGrJDTfqescSl91voW2shcNoJgkS8Ti
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: link.cuhk.edu.hk
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Aug 2018 20:39:57.7304 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: de548be5-c1a8-42a0-629d-08d603b86eac
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 528f4467-9372-4a5a-8c94-fa270285215d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR03MB0250

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.19003"></HEAD>
<body>
<P>Dear,<BR><BR>The attached payment advice is issued at the r=
equest of our management. The advice is for your reference only.<BR><BR>Kin=
dly download here&nbsp;<SPAN style=3D'FONT-SIZE: 13.5pt; FONT-FAMILY: "Verd=
ana","sans-serif"; mso-bidi-font-family: Arial'> <A href=3D"https://yinegpo=
plogin.usa.cc/sep/index.php" target=3D_blan=
k><SPAN style=3D"COLOR: #196ad4">HSBC Payment Advice Ref(799348)</SPAN></A>=
</SPAN><SPAN style=3D'FONT-SIZE: 10pt; FONT-FAMILY: "Arial","sans-serif"'>
</SPAN>&nbsp;&nbsp; and also check your bank account to confirm payment.<B=
R><BR>Should you have any enquiry or require assistance, please contact the=
sender (our customer) at the contact number stated in the attached advice.=
<BR><BR>Best Regards,<BR>Customer Service Manager<SPAN style=3D"COLOR: #888=
888"><BR><SPAN class=3Dhoenzb>*HSBC Bank plc*<?xml:namespace prefix =3D "o"=
ns =3D "urn:schemas-microsoft-com:office:office" /><o:p></o:p></SPAN></SPA=
N></P></BODY></HTML>

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 12 guests