Fake banks, couriers, law firms, escrow and other fake sites used in scams.
by Ghanageria Fri Aug 17, 2018 3:47 pm
from: HSBC Bank <[email protected]>
date: Fri, Aug 17, 2018 at 5:21 PM
subject: Payment Advice
mailed-by: link.cuhk.edu.hk
signed-by: mycuhk.onmicrosoft.com

The attached payment advice is issued at the request of our management. The advice is for your reference only.

Kindly download here HSBC Payment Advice Ref(799348) https://obcufjcrrrlogxj.usa.cc/pmb/index.php and also check your bank account to confirm payment.

Should you have any enquiry or require assistance, please contact the sender (our customer) at the contact number stated in the attached advice.

Best Regards,
Customer Service Manager
*HSBC Bank plc*

---

Received: by 2002:a17:90a:170b:0:0:0:0 with SMTP id z11-v6csp974496pjd;
Fri, 17 Aug 2018 10:21:49 -0700 (PDT)
X-Google-Smtp-Source: AA+uWPyUbpw/I7Kh4TrHOhPl7uH5+hJeLbNF5MpHWMVODN+LK6ln4fhGfZK0GzdJXsLGPXZtUWtA
X-Received: by 2002:ac8:3159:: with SMTP id h25-v6mr27816451qtb.305.1534526509699;
Fri, 17 Aug 2018 10:21:49 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1534526509; cv=none;
d=google.com; s=arc-20160816;
b=x8AI6nPTzJjTxEosFkk4f5ujag8zIH+pvnH9TIsiWBwSSwJkhG4G5MJ2HzTCNNPbn2
pJEFqgIBX6EXlPcHjDQ189P+4svoMpuJ2gz3mIJKRMmZdr80ktt5DjN3fPdzt+tlSuM6
5ax5O5L0itITxFcxHWuBn4JPPHNakGsL6xi1RhagTZV+S5Ov1ykOeYqXsTPGSYN0hbU/
dJPguoOZMcNwg4nJgX+FrLCTgQwOdVwPdGrgabN2Kn176ud4A2I9hD8/VNbBCp6Amh+K
VmQPe6nEUAPp5vBgGNboY2amAkB3m4r6Rwx2KD50GadlvTANk+1hKkBJM1vPqrZnizmE
jdHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=spamdiagnosticoutput:content-transfer-encoding:mime-version
:message-id:date:subject:to:from:dkim-signature
:arc-authentication-results;
bh=xNX5KAWYWtDv9aS2mCkenX31mBCHTXtsnFqTmhb3bR8=;
b=bnFbVblW3Lsio8SLQVx7G9+xbWZUP+chMVzMT2XvwV2GDE2UsFheBRvHeCC8AnVqN6
DvNy9mz8ZkaxbSeNw+ZqfObEa9gXJv9wK2J1MD3SXu4BrcxEgumQ06lupZesfM4zFpDI
Id2HfT78uPMkCd3pIjXBJ5eE5LA8KcwLaPqQVKRrzJRdJeR+i7OQhmasHarFq0WOi4kk
4NYXEOyA7D+01MuMOdoE/omQitp+pjOw0l26WRa0Bibkl7jGSckZkWl0PUiqtXWwMwCF
h4h3F3Yir5GDAOFuVUBWhHDsYCRUcQWv9mMm/U3dpjQG01e3xCPLvwydi+LIs8slgfCJ
XddQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=selector1-link-cuhk-edu-hk header.b=AbZ3OJ50;
spf=pass (google.com: domain of [email protected] designates 104.47.124.229 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01hn0229.outbound.protection.outlook.com. [104.47.124.229])
by mx.google.com with ESMTPS id k23-v6si700091qvg.117.2018.08.17.10.21.49
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 17 Aug 2018 10:21:49 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 104.47.124.229 as permitted sender) client-ip=104.47.124.229;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=selector1-link-cuhk-edu-hk header.b=AbZ3OJ50;
spf=pass (google.com: domain of [email protected] designates 104.47.124.229 as permitted sender) [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mycuhk.onmicrosoft.com; s=selector1-link-cuhk-edu-hk; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xNX5KAWYWtDv9aS2mCkenX31mBCHTXtsnFqTmhb3bR8=; b=AbZ3OJ50+1czod3pbiWi7F7ihRZUmhlMla36bz5H1IgXYYNgcpIzt4klcJSIx3hgo4EnAlkW9348YRo27gbqC2Tixs38SjzPqaP0ToDnrINikxK1AgJG2lJgGBT2OuZnH4k23q84PHHGnQ9ksjfA/HAtMeUwX5VuTou0MeGfnRE=
Authentication-Results: spf=none (sender IP is ) [email protected];
Received: from link.cuhk.edu.hk (35.170.55.118) by KL1PR0302MB2536.apcprd03.prod.outlook.com (2603:1096:802:d::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1080.9; Fri, 17 Aug 2018 17:21:46 +0000
From: HSBC Bank <[email protected]>
Subject: Payment Advice
Date: 17 Aug 2018 17:21:44 +0000
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [35.170.55.118]
X-ClientProxiedBy: DM6PR03CA0016.namprd03.prod.outlook.com (2603:10b6:5:40::29) To KL1PR0302MB2536.apcprd03.prod.outlook.com (2603:1096:802:d::8)
Return-Path: [email protected]
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: a9c2bf30-672a-4ccc-18e0-08d60465e92a
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(2017052603328)(7153060)(7193020);SRVR:KL1PR0302MB2536;
X-Microsoft-Exchange-Diagnostics: 1;KL1PR0302MB2536;3:p3R52vF2JZ9E1rqwWMUvHfRxycmjfib7nifx+ONm+mMQp7HIATdnIuyzpn4XTCDpj1FLYrUpgFy9R0k5rCWdiunot71AKE5Dk9IRvgdd1FPhsyWms2Er9wiiP6ms4dIWUxKTVa0pRybapTjpPinBl3PF07QLGX7sD6hAijGjjEVbHt5sBsdN+NSMr5WeVJ9DMLtexx0oNdK1hqLjLbdnlW2sjRZSISDP4YRuc+6BpYEu1nLSonGIURJ6YHuyjKz+;25:Y+QxJe8bSfOCHgyfmYzxJPrjEHyvOjzAs4kb4krLrJCL0NqSqWv5c1Xee2fgLMouvL8l2egKKOhOhfZNSnNoSLIWW8QivME8R7U21ZqD+fDA/aR9/Z3M4S8MeVqe6o807BuV3lq0SqNc5PvqDA+gfSuG5bt4tT21z+20codTz+09DLsIiyKDZbKRriLy8LcVPH7EH7nJRPNj2Gqy1z4wbizUwFZfavcJt9yAzyBpoejnG7g5YGqd55kdKJJKQhntPGP5DvfJYCJyRC9NJEnpCi5Xbi/pem2sGMNk6fSRqwBb4IZegHVq3MolzTx8NClxD7DEbZsoQ23agaPfOd5dXg==;31:Z7pYKweX5PGvuteuYssB2aZVXSkt0zmQF2H4Gl5avuyQv51zmatQE9j4df2TnPnizSkBSNjgl+GOAYNnm0fZvmB1aw3Ql8K+WDEdeLov/1W7DfOf7XfNIrr9Bd3W5vOljzVcCZxkf0gE3/UJKdSuYcHU7AA81EV0Ydvq/TW7614+ho0Zchls0R/znYb8cNDtyeGJWDH9Xgj2tVyuRHu9tPZwWH4DcqS7WFbc1FRWGI0=
X-MS-TrafficTypeDiagnostic: KL1PR0302MB2536:
X-Microsoft-Exchange-Diagnostics: 1;KL1PR0302MB2536;20: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;4:P6+IT7xnHZavc6o+gOwpWan/qWtSzj7u1kWeK7MuIY9fRGnnhDmf9ItrxPt7is7lpdKNkgh5F84cGbxzgRtZn7/KoX5YryJ1m7lYeB6LAQmOX+u4LB0nKG+sCnYlloSGAcDSDmanSyNgtRk29LzjH9gZGMrcMUc3+dt35D7r98c0L5t4K8+RTiMjbBKVX9o0CNqy/eynMwa+NBu1bLXXaCLb0zjq7CNb1jVdkpfgptvgiaW1Un/5VTnAud0Tcw82mFd66RmGBQvS37MKs1MHijOB6XLerkZML8npDuCPIhp206bbDoAou2S3saSKXZ+5YKK+2aLw06ldSZoy39ZBTz5+Z5qukdfh9b/j7SM9WYl5/sP+0O+GhhqfatwVqsRw
X-Microsoft-Antispam-PRVS: <KL1PR0302MB2536B1FF2FE908312880D57F8C3D0@KL1PR0302MB2536.apcprd03.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(85827821059158)(105169848403564)(217945515857101);
X-MS-Exchange-SenderADCheck: 1
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040522)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3231311)(944501410)(52105095)(3002001)(149027)(150027)(6041310)(20161123564045)(20161123562045)(20161123558120)(20161123560045)(201703131423095)(201702281529075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699016);SRVR:KL1PR0302MB2536;BCL:0;PCL:0;RULEID:;SRVR:KL1PR0302MB2536;
X-Forefront-PRVS: 076777155F
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(396003)(376002)(39860400002)(346002)(366004)(136003)(189003)(199004)(3846002)(68736007)(606006)(97876018)(16799955002)(66066001)(478600001)(10290500003)(2616005)(786003)(10130500003)(316002)(23756003)(486006)(12747405002)(575854001)(186003)(476003)(956004)(8746002)(8266002)(386003)(69596002)(50466002)(347745004)(52116002)(16526019)(7696005)(81156014)(26005)(103936005)(8936002)(3480700004)(413944005)(55046002)(8676002)(81166006)(2361001)(53416004)(7116003)(54836003)(6916009)(33656002)(5660300001)(236005)(6306002)(55016002)(10770500004)(25786009)(49552006)(39060400002)(14444005)(7736002)(9240055007)(74482002)(15650500001)(53936002)(2906002)(5024004)(23846002)(6116002)(4743002)(2351001)(105586002)(88552002)(106356001)(1076002)(97736004)(570100008);DIR:OUT;SFP:1501;SCL:5;SRVR:KL1PR0302MB2536;H:link.cuhk.edu.hk;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;MX:1;A:0;
Received-SPF: None (protection.outlook.com: link.cuhk.edu.hk does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;KL1PR0302MB2536;23:Mj00e513qqXwxvUckrP7tylHsZK+V/pq0aDFQ0Z9tyMzMpMPNXf5qHNgStNBKb0nOMGzmNJ/wtKCV7SlsH8aum5DLaxKFHzxQNDS27EMgl+wmaceDuCf9rrwHp5Tu9A/zTTWP4BwUxDKQGiPZd5UfLUJIn6HRmUP+QN3OMyZVB1a9ackLSk0hTx3hYYzvDicKzO464XoVbh6TgFPeqTP4aA+9Tnfx79du2b98R7kUyaKDIoP8UbdBWz3GrZq9FSE4pBqGCN/Tlw++NwCHk9YDmUZWK4Uwhh5cJTTJocDs5dUx2GdMm7afY0sbh3hGUm0z3quvjGkD5FhsoTcsWPQ19srAAekG+DZGOK8rm3zpkOER34H+X+f9bSVB8QLws49jBTaNqMPcIdnWkUFcFHfEebLwLt2DSA3vn6wcMik96RME/d6BnPOsM5HJ+3wbrM6z0uIugHscF/5OPuRJGOVJyJfgVrMzuQwg3iGYUGWh4tRDOYba9PsnJ/4XnuB9pIag4XWPjrWL+vXKCY/M57A/Y/urpAuhNwxWEzFy1u5Pe+FLbi4dJH4FfY3K2vBpr7VdZ87kPmgrvamM5nBzFmCbJMSSJcJc5c1y5gn2o8mJ5Ks+xRIHXjbf38T0BFWnO0JWwHjTH4z895rdNjbCg6XwQS9NEx4ox9tdd3iKHdjnXVOiAym+ZZzJ45OO/Y7CtDZkw4uEOr3gsv9YsmRT6LlxeG7wRIdGuO3M5mpdiZYEWoDIm57JpxE4jeCMt0qOeDHWSmdnX67BKBHimjzRe1u+nd8EV86mVdv8wLDzZTAH2dzlWtSLsh7KNWpOXTfb6fSvQmINdMDfxaEoqOO1EYQjtEOO9S5lI+lQU9AbB8LAjftNaASP1vLEyWb1a6O33DLI/C21DLDeo4a0w3FS6jU2YSFNu7TWbM1c2qAIgjQU8xyozkl2DsGkhMBHBsxZXjtC7R+Pq6HGk9aTdy1w84U9ofJ0BNc1eg3xZ628MKlNJ2Mvp8g4PpiQ6K36QX5h34zFPIoC7yC7/8BRhe2QfSSsRH7aff7W0/VbqOP3hqvuxl4vTi7QXQdKeTA0Jet1a8aA9fjn+w9pCKwetkx3R0VAEyAaXJD6D8IMVoGxa5li0GHaJdVeRkcJ98zMB0zoPGKlZFyrD6wGPE6IHR0tNNFxocy5DvhPpV+Iw3ou6kTnRTRkmG/Pev/Bf0tN6pEcbXuVBvfxbTuVTVZV1V0zqbQWuectTJELAK683pk7k2iVfX6KpfElu8bmemWl/x67o325hiXZxPQE3MVif56A4JP4CpvrxkKXauRfXpBaJ+FB8SsGsweZhleFAqG79Tkiq9IXSIMIJygjuyKBSDECUb9Rr5NZUvbB2KUr/Xht7pBMTKL3mZ7mYZ1Q6jdPpHUsVZwFJVIC+F/MP56cFdA/o7slAbiqyF8Wtb939UK3DuxZHEDpcCnYUwbyGCoA+bNz7bM47QjoTaUDoe/3NXeCl13qrSAFTOMKZ2Dph7h70nbhVSWxyce4JEvcFRpiU6XZcFEC//7WvVjYXFHyNS1al4LnAhssu4F7H80cMHy4RBOE6p0pLj9IBxHw7CM/CoFZpocBHMO3bG5HKl7KNwEnCkzoMwxfJiQhgqutPLyappdtKWHs8rTaHemVYGVtk3OGVzWT2RYy0xHVGThiLc6ipZnHN170KGO55D0uZw4j997/md45ogZ0TUaJsllmgc0iSU8KPB3WpS35BV/vOiJ2z4uVw==
X-Microsoft-Antispam-Message-Info: /jkNwl9mrNBwtahQ6iAbh3aCskgnI2z1WfFutiG2OhWcB9kdXy36mjKR+wOIY+/SCFCNg//TVKAFl4JYzshXsXNz/5Po1uw/YiSOeYt5dTu0LDIBKy6PrQOS7fM95WUMkHS+N0+OjtGVlRu005z0nmQ5NOz3Bqxej+TeK4zBej9NaNgssS3M0FyxXUXIgBH8e7HbHk5eAi6BpM+5EfpwfhInC0wK8kwfj361NgBHbsBbovpZIY4+XowFmr0jmD4eq0YiyQenjr92KujmE8ANOarxKcu8SCpLj9jr1SdW+PgbpLKh3PHcY3oRJjdAhjxAv/rIJci3HpE4nuLNd5Gr/C9QH/U1v1fGN10a4AD2NS76BHjfk6C6vfzd0q65u6HM8o9Bk10wfd6C4tHDrJH66Hd1oM9nbyZVF6+ezRCXPeAeh/NkonnSBZFMnbJXnyRNuuj8VhrrQ1wn75ANYz+OGjZPf6s3iCEzk3MeOnJ+MAttEdzI3YCHIzn2drYmJtNAtf33rilUk/R6EDWDspmRwB5vA8v4ZbT+xdF8tzon7rtcVkX+AXIlk8+Hpk6760zSXbrE8VReOxM24MuFwFbr+EkqvXatLCSzj93r0/gkBm58la7XkMXqt9kI3C6eJyX83eW7JFUDciY5lH5/uQ8F07faKyBAUvTi1E1N6oxmj0GiO/1yt39DzDJo5tmNVEzXv4peK9VGgZtPOJaGLrJNUJ53UpP36ypUY4Up/T0GjKU3+FDkgZEUU5nyfs0EPxJ/d1YzkEef8unzFPQhh854SNUD3yR4hVJoB6qa/EEkHMg=
X-Microsoft-Exchange-Diagnostics: 1;KL1PR0302MB2536;6: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;5:z+01+QWeliDeBFUPupJPmaDel4+9prBEHmY9qTOAwBQubHFgkrCzbA7W2QRmnfWwl2pv4nLYL43Cb6qWWwPu8tyKkI89BXdVpOxWjc8hz4KjzFPGp1/0F/3qXsNDFbE/0ZO+ricLOVCUR9CWpKy86Qq2WyKWI6ZOUkl/OAyLLLw=
SpamDiagnosticOutput: 1:22
X-Microsoft-Exchange-Diagnostics: 1;KL1PR0302MB2536;7:fGLY/YZYJ2pZYgy79IXkTGDCcm1JfVRzF3B1Bt+w18xy8/noFZMy7oXcfg851RXFvn63X0OllFn5U0nPH+cqdovbsxrbV2zVZ2JL134FgSAXupfl/aRf5kA3bJszcSDEwuIG2xX2Bij5VfvBnRgduGf+Ixp7fjn1dtSvybqiM6enXdksBZtJrjjCIkIM3I0NkaUSOmYElpr+piKMrDrWEHObladyItt/2prNAJtR3aRx0haU7vgs7RXzwcAbYX5e
X-OriginatorOrg: link.cuhk.edu.hk
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Aug 2018 17:21:46.1545 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a9c2bf30-672a-4ccc-18e0-08d60465e92a
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 528f4467-9372-4a5a-8c94-fa270285215d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR0302MB2536

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.19003"></HEAD>
<body>
<P>The attached payment advice is issued at the r=
equest of our management. The advice is for your reference only.<BR><BR>Kin=
dly download here&nbsp;<SPAN style=3D'FONT-SIZE: 13.5pt; FONT-FAMILY: "Verd=
ana","sans-serif"; mso-bidi-font-family: Arial'> <A href=3D"https://obcufjc=
rrrlogxj.usa.cc/pmb/index.php" target=3D_bl=
ank><SPAN style=3D"COLOR: #196ad4">HSBC Payment Advice Ref(799348)</SPAN></=
A></SPAN>
<SPAN style=3D'FONT-SIZE: 10pt; FONT-FAMILY: "Arial","sans-serif"'> </SPAN>=
&nbsp;&nbsp; and also check your bank account to confirm payment.<BR><BR>Sh=
ould you have any enquiry or require assistance, please contact the sender =
(our customer) at the contact number stated in the attached advice.<BR><BR>=
Best Regards,<BR>Customer Service Manager<SPAN style=3D"COLOR: #888888"><BR=
><SPAN class=3Dhoenzb>*HSBC Bank plc*<?xml:namespace prefix =3D "o" ns =3D =
"urn:schemas-microsoft-com:office:office" /><o:p></o:p>
</SPAN></SPAN></P></BODY></HTML>

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 17 guests