McGill and Associates - loan scam

Marie12345
Welcome to SW...

Alas you will not get your money back, however if you wish to help I would suggest that you post the emails with headers (take out your email address before posting), that way victims will be able to search and hopefully find their way here

It may just stop someone else from losing their money

Here are the emails and contact info I received


Delivered-To:
Received: by 10.180.36.132 with SMTP id q4csp245809wij;
Thu, 19 Sep 2013 08:18:56 -0700 (PDT)
X-Received: by 10.15.68.196 with SMTP id w44mr2890724eex.82.1379603936036;
Thu, 19 Sep 2013 08:18:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server4.nextgenhost.net (server4.nextgenhost.net. [93.115.93.25])
by mx.google.com with ESMTPS id 7si7232960eeo.79.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 19 Sep 2013 08:18:55 -0700 (PDT)
Received-SPF: neutral (google.com: 93.115.93.25 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=93.115.93.25;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 93.115.93.25 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost.localdomain ([127.0.0.1]:60528 helo=www.syncordfinancing.com)
by server4.nextgenhost.net with esmtpa (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VMg0F-00058j-OB; Thu, 19 Sep 2013 23:18:47 +0800
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Thu, 19 Sep 2013 23:18:47 +0800
From: [email protected]
To:
Subject: Loan Approval
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server4.nextgenhost.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - syncordfinancing.com
X-Get-Message-Sender-Via: server4.nextgenhost.net: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

Based on the review and assessment of your on-line loan application, we
on
behalf of Syncord Executive Financing, would like to Congratulate you on
your approval and it will be confirmed subject to the completion of
formalities. As per the terms and conditions of your loan and
clarifications your assigned loan representative, Ms. Sarah Reynolds,
will
contact you with further details. Please feel free to contact Ms.
Reynolds
at 1-877-240-3431 Ext# 133 from Monday to Friday between the
hours of 9am to 7pm & on Saturdays from 10am to 4pm EST. Thank you for
choosing Syncord Executive Financing.

Legal Department.




Delivered-To:
Received: by 10.180.36.132 with SMTP id q4csp250065wij;
Thu, 19 Sep 2013 09:46:21 -0700 (PDT)
X-Received: by 10.15.99.72 with SMTP id bk48mr3407730eeb.22.1379609180707;
Thu, 19 Sep 2013 09:46:20 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server4.nextgenhost.net (server4.nextgenhost.net. [93.115.93.25])
by mx.google.com with ESMTPS id 47si7594511eea.61.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 19 Sep 2013 09:46:19 -0700 (PDT)
Received-SPF: neutral (google.com: 93.115.93.25 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=93.115.93.25;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 93.115.93.25 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost.localdomain ([127.0.0.1]:59854 helo=www.syncordfinancing.com)
by server4.nextgenhost.net with esmtpa (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VMhMu-0000Km-VT
for ; Fri, 20 Sep 2013 00:46:17 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_8dd978dad6c92d80ec1a2f49c8e58701"
Date: Fri, 20 Sep 2013 00:46:16 +0800
From: [email protected]
To:
Subject: Confidential Loan Contract
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server4.nextgenhost.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - syncordfinancing.com
X-Get-Message-Sender-Via: server4.nextgenhost.net: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

--=_8dd978dad6c92d80ec1a2f49c8e58701
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8;
format=flowed



Please review your loan documents as requested. Your documents details
the terms of the loan you are receiving, including the amount you are
borrowing, the term of the loan in years, the interest rate, the amount
of your payment, and late fees, and other key terms. We have worked with
your lender to provide copies of all closing documents for your review
prior to this closing. Contact your assigned loan representative once
you have signed & faxed back all relevant documents. Thank you.

Legal Department

--=_8dd978dad6c92d80ec1a2f49c8e58701
Content-Transfer-Encoding: base64
Content-Type: application/msword;
name=" 15k.doc"
Content-Disposition: attachment;
filename=" 15k.doc";
size=2004992

Thanks for posting

The emails are coming from Romania.

On the website they say they have been in business for 20 years yet I found this

http://syncordfinancing.com/about-us/index.html

Updated Date: 18-sep-2013
Creation Date: 18-sep-2013
Expiration Date: 18-sep-2014

This seems dodgy to say the least !

I also did a search on the IP associated with the site and it shows a location of Romania, I realize that this is not going to be the actual originating location but if I had of done that search prior to considering doing business with them that would have been enough to give me doubt and not continue.

Oh sorry I guess we both had the same idea...thank you

syncordfinancing.com is in the process of being reported for fraud.

beaumontreferrals.com is another fake loan site. It is in the same netblock as syncordfinancing.com and has much of the same text, but a different template. The registrar and nameserver are the same, and the registrant of both sites is hidden. Both sites claim to have years of experience; both were registered less than a month ago. Both sites have been reported for fraud.