I think I am being scammed

The name of the bank: http://bfsfin.clientportalonlinessi.com

Email: [email protected]

My name is Rose from Ohio And I have being warned by the Money gram not to send money to this Scammers, BFS Finance which have demanded I pay for COT of 2500usd. I think it's a scam or Am I wrong, someone tell me. I signed up and online account for a transfer to be effected to me from a female soldier who claims she was held in London while coming from Libya. Well she claims diamond was found on her by the immigration

As monegram has told you it is a scam.

clientportalonlinessi.com is a fake bank and bfsfinance.org is a fake email-only domain. Please post the email from bfsfinance.org with complete headers so that we can kill it.

pass (domain of yahoo.com designates 98.139.213.79 as permitted sender) Z2U6IEZyb206IEJGUyBGSU5BTkNFIDwgaW5mb0BiZnNmaW5hbmNlLm9yZz4g RGF0ZTogU2VwdGVtYmVyIDI3LCAyMDE2IGF0IDg6Mzk6MjYgQU0gRURUIFRv OiBsYXBhbG9tYTAyMTlAeWFob28uY29tIFN1YmplY3Q6IENPVC9BVVRIT1JJ WkFUSU9OIENIQVJHRSBbUkVNSU5ERVJdIFJlcGx5LVRvOiBCRlMgRklOQU5D RSA8IGluZm9AYmZzZmluYW5jZS5vcmc.IEF0dG46IE1zLiBSbwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzI-
axWkaCkWLDuk..svsV2ihGdU9r7cuBVrUjaWC_ENEsVdITF2 gug_jZVqAe_5AvpjSs0W54y4ufjdOWlzGrLn3b7OM4pfrkrWWZQfAwZyjFSQ 8NAfAoa1oCUKUiaKB_5skKjPfjHIpzM74tEnIs1.BDUJKzOvpOb7LS6IC4Zv noTzZ6Crwp7WzbeNAaftI5aOUX4mjEQq54xojWKwNICM9RoclN_5OM60sEr1 nZ_3ZfNWZZDQF5hILGj2TNXuLH.oIxFygEhLEzgacwSsE4DL7LuA8dHNHAAY 6Sp0vVotkDZnd3YV1mZ3TWDmbZieO8uREAwXxiRGiDnf0T891_P.6CO1KrgZ efl23EmxPHUDOGw7UNH_3IrNf9tAdJeGGkPD6NLfUiEA44FNeB3N22h0axay h03s7dVzMcG.QC76yJCTU.0mhxR3veI3c78PSV8kJs6KNzH.x4Hmv4_WNUYJ dPHV.5Y1QcuKi19AsU15uKBwEEOOaNUtNtIkNYgQEQ1dRDsQvGF9aJeRE3qZ Z6T84LrqAvH.MJjAueI3maWoUKgh7AFih46BDtltwmYT.KidJbHAVJNaGoZG a_fud0ImxMtAf1NqsCKH0PAKF.VLQgN.zdy.Wnseq1pOy.7_Byohl4JHl2Dn YCw2.sxVmRx.0l2jdL6tGkUnXP4W6NI3mQIHOgfLoeqsjqVgz3K0v1HzsfSf NJloSulrG_FI91CEsqzdhtqR1aLEgYU4qKpVRB7_ixHc1H5Pc24.htie.8IL HYnlwFbsWoJvzEsJxOkHcVg3R0zlGoI4gfLF3qHgefXB6xzBXRlLCID5kh1R dlhOeU91xFH9sGApgBMtvl7V.54svs0LizPocJ7uLmyLf_.3FDWPhd6fBmuW j4pupp83uu97.6_MfWfnG4Qok9KzozU8nX613W3i.RJwb2eZ8gTP5g9qRUjp 0ooOvT82sAnAAAgL1Ocl3nssHz5X5xh9U54NFAacp6K6.lBQpAApzJRO29Ah W3Ndwf.Gxd1awFb2t5wp5M2Fu6jMrV0DNIQXqyBLH3m4MVzPgC7ED7UM.wJi w4mhdkq0_iqFaZD5oqYU2q4ubfTNugT4kWmdD9iWmVzKDA.9GSNvvcqPeX8w 7jROOzPT115PKF9w.Yx5QQH_uqMycW3saa1FDo4ff.jI5o9v4pp3BL7OfJAs 073tsSC.0MaUlk.AwYLccCN9E92iNu4cUE.Gmrq.B0sCPLWsTMfLWjBrrBVs nk7qdcnZHH1QPyg79Ask1rhTFp6mL9Y3zcbLKtoxqeEBclIPrfOzcJVhLf5C FZtrlZm.5IgOkml8QNoEi3zt.KipW0si4HbH1avsMK9bGBafCYzBwgp978IA Lm8ZU0kxuVePgpeT8NpiPozYgX.tIgylQJu0nvdtxY7aHZdL.oezkhriV.Tx QVVkSI1xzzQccCHmo0ZiPwuhRsJ4TyLLRPPD9C9CRZ0.m49p.Jn_4aV.mCcr bR3BjAVpn38V4G_ADiqncpyR9TP0Bzr2_TSWeE2OJwSmoP4nnis-

Please explain to me how do i send you the full header? I'm not to sure about that. Rose

BFS FINANCE <[email protected]> That is the email they have been contacting me with.

X-Apparently-To: <removed personal information - Tim>; Tue, 27 Sep 2016 14:56:41 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of yahoo.com designates 98.139.213.79 as permitted sender)
X-YMailISG: axWkaCkWLDuk..svsV2ihGdU9r7cuBVrUjaWC_ENEsVdITF2
gug_jZVqAe_5AvpjSs0W54y4ufjdOWlzGrLn3b7OM4pfrkrWWZQfAwZyjFSQ
8NAfAoa1oCUKUiaKB_5skKjPfjHIpzM74tEnIs1.BDUJKzOvpOb7LS6IC4Zv
noTzZ6Crwp7WzbeNAaftI5aOUX4mjEQq54xojWKwNICM9RoclN_5OM60sEr1
nZ_3ZfNWZZDQF5hILGj2TNXuLH.oIxFygEhLEzgacwSsE4DL7LuA8dHNHAAY
6Sp0vVotkDZnd3YV1mZ3TWDmbZieO8uREAwXxiRGiDnf0T891_P.6CO1KrgZ
efl23EmxPHUDOGw7UNH_3IrNf9tAdJeGGkPD6NLfUiEA44FNeB3N22h0axay
h03s7dVzMcG.QC76yJCTU.0mhxR3veI3c78PSV8kJs6KNzH.x4Hmv4_WNUYJ
dPHV.5Y1QcuKi19AsU15uKBwEEOOaNUtNtIkNYgQEQ1dRDsQvGF9aJeRE3qZ
Z6T84LrqAvH.MJjAueI3maWoUKgh7AFih46BDtltwmYT.KidJbHAVJNaGoZG
a_fud0ImxMtAf1NqsCKH0PAKF.VLQgN.zdy.Wnseq1pOy.7_Byohl4JHl2Dn
YCw2.sxVmRx.0l2jdL6tGkUnXP4W6NI3mQIHOgfLoeqsjqVgz3K0v1HzsfSf
NJloSulrG_FI91CEsqzdhtqR1aLEgYU4qKpVRB7_ixHc1H5Pc24.htie.8IL
HYnlwFbsWoJvzEsJxOkHcVg3R0zlGoI4gfLF3qHgefXB6xzBXRlLCID5kh1R
dlhOeU91xFH9sGApgBMtvl7V.54svs0LizPocJ7uLmyLf_.3FDWPhd6fBmuW
j4pupp83uu97.6_MfWfnG4Qok9KzozU8nX613W3i.RJwb2eZ8gTP5g9qRUjp
0ooOvT82sAnAAAgL1Ocl3nssHz5X5xh9U54NFAacp6K6.lBQpAApzJRO29Ah
W3Ndwf.Gxd1awFb2t5wp5M2Fu6jMrV0DNIQXqyBLH3m4MVzPgC7ED7UM.wJi
w4mhdkq0_iqFaZD5oqYU2q4ubfTNugT4kWmdD9iWmVzKDA.9GSNvvcqPeX8w
7jROOzPT115PKF9w.Yx5QQH_uqMycW3saa1FDo4ff.jI5o9v4pp3BL7OfJAs
073tsSC.0MaUlk.AwYLccCN9E92iNu4cUE.Gmrq.B0sCPLWsTMfLWjBrrBVs
nk7qdcnZHH1QPyg79Ask1rhTFp6mL9Y3zcbLKtoxqeEBclIPrfOzcJVhLf5C
FZtrlZm.5IgOkml8QNoEi3zt.KipW0si4HbH1avsMK9bGBafCYzBwgp978IA
Lm8ZU0kxuVePgpeT8NpiPozYgX.tIgylQJu0nvdtxY7aHZdL.oezkhriV.Tx
QVVkSI1xzzQccCHmo0ZiPwuhRsJ4TyLLRPPD9C9CRZ0.m49p.Jn_4aV.mCcr
bR3BjAVpn38V4G_ADiqncpyR9TP0Bzr2_TSWeE2OJwSmoP4nnis-
X-Originating-IP: [98.139.213.79]
Authentication-Results: mta1462.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm0.bullet.mail.bf1.yahoo.com) (98.139.213.79)
by mta1462.mail.gq1.yahoo.com with SMTPS; Tue, 27 Sep 2016 14:56:41 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1474988200; bh=1XXzqKUprb9GpclKZS2Vi8aVZT2N6FdWzkWBPPQBPW4=; h=From:Subject:Date:References:To:From:Subject; b=HxUCiqKyBAwySh2yiC8bsiWEhmNu3vXlVaXjpxOpqpIf2QNsjSLOrJgblt5sbrZqXsy+o+TYvA9fdY7Tx0/RhpDn1+vRKQjKtOJr1h6DZx9bCAVtT3jdWJThBTpbvmDQXJlV6yiZSaOTmHl2ELbpzEUdSV99m9dl/3sKIKADy1B9yBJx3vsCYffwsn8IV1lHyKlqO3UtOLWg7M4Lp60/1Z7ZEl8lswE5UMKSZHHDpJUQSw7Lwp48KxcBySEjFQtvENCpaX87Y/bMng3qzVKpEnsIE0RbBp2wzzUu6joE6QPgL12EkKa8v6yS9NDfdj5DSHM2t3aYFpsZ3SHSEkALcw==
Received: from [98.139.170.181] by nm13.bullet.mail.bf1.yahoo.com with NNFMP; 27 Sep 2016 14:56:40 -0000
Received: from [68.142.230.72] by tm24.bullet.mail.bf1.yahoo.com with NNFMP; 27 Sep 2016 14:56:40 -0000
Received: from [127.0.0.1] by smtp229.mail.bf1.yahoo.com with NNFMP; 27 Sep 2016 14:56:40 -0000
X-Yahoo-Newman-Id: [email protected]
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: dmQztiUVM1kQYYFXtTtmLD.QBRMMsXZuv37O7lw3cvfl4Kk
vYd45G2AhzyFuKs7CqdXjNpond83D.lNfqVYEyPlKfjAj7Fsie1Krq.tRk_T
5XHkqhgKY_Ky4uTRCVkyG.h6w0iQ9uJWghldpsRlUBSLBq4FGDF9ihfUg9gF
TBxQscMsqlWN539BCrWhQDTJ0d0Yd9hrdayobmq1p5lkOLW_YuS5OM_kpn4n
ZtDvfj3690M8KxtHBxBt6mHOLXO7vr4nYbt4xqez.WjOP68IWW7lb029NlLa
aFhk6C8Ut5UpB4.2ETy9Q.pnYQUZIBZC93TGWiEnWXrWkwtgxixvbyRgK.Sy
T2ai8_ejJ7rPHzk6NeKWfCr9ulEaC0d6ha.FOcET0usuVql8bHiuoTo2UtJ4
.fOWLvbTHI395j8F6rx6.ISAJsnplUDl3tMqaYTfeMezCQoZbcPRuTwAW46u
U2ZZrZ.VyzpYY1hbJpYsC_uXggs83SZ_apX5d0VLHkEFrZTYFYdAgLYOpgVF
0hJP5qNEvbb_XEEPPZR9PTgiq8yt2NCUT8c1zGGakF0_BwcyR
X-Yahoo-SMTP: iFxysvyswBA7cSVS_QuQIHJnu_VD9OfH.Q--
From: [email protected]
Content-Type: multipart/alternative;
boundary=Apple-Mail-8ECBD599-112B-48FB-B287-55D0CE88FA45
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)
Subject: Fwd: COT/AUTHORIZATION CHARGE [REMINDER]
Message-Id: <[email protected]>
Date: Tue, 27 Sep 2016 10:56:39 -0400
References: <[email protected]>
To: <removed personal information - Tim>
X-Mailer: iPod touch Mail (13G36)
Content-Length: 2191


--Apple-Mail-8ECBD599-112B-48FB-B287-55D0CE88FA45
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable



Sent from my iPod

Begin forwarded message:

> From: BFS FINANCE <[email protected]>
> Date: September 27, 2016 at 8:39:26 AM EDT
> To: [email protected]
> Subject: COT/AUTHORIZATION CHARGE [REMINDER]
> Reply-To: BFS FINANCE <[email protected]>
>=20
> Attn: Ms. Rose ,
>=20
> Be reminded that you are required to pay your COT/Authorization Charge. Yo=
u are required to make this payment on or before Monday the 3rd day in the m=
onth of October in the Year 2016.
>=20
> Failure to comply to our directives will result in the deactivation of you=
r BFS Account and you will be requested to pay an extra charge when you inte=
nd to reactive your Account.
>=20
> Thank You,
> BFS MANAGEMENT.

--Apple-Mail-8ECBD599-112B-48FB-B287-55D0CE88FA45
Content-Type: text/html;
charset=utf-8
Content-Transfer-Encoding: 7bit

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br><br>Sent from my iPod</div><div><br>Begin forwarded message:<br><br></div><blockquote type="cite"><div><b>From:</b> BFS FINANCE &lt;<a href="mailto:[email protected]">[email protected]</a>&gt;<br><b>Date:</b> September 27, 2016 at 8:39:26 AM EDT<br><b>To:</b> <a href="mailto:[email protected]">[email protected]</a><br><b>Subject:</b> <b>COT/AUTHORIZATION CHARGE [REMINDER]</b><br><b>Reply-To:</b> BFS FINANCE &lt;<a href="mailto:[email protected]">[email protected]</a>&gt;<br><br></div></blockquote><blockquote type="cite"><div>

<meta charset="UTF-8">
<p>Attn: Ms. Rose,</p><p>Be reminded that you are required to pay your COT/Authorization Charge. You are required to make this payment on or before Monday the 3rd day in the month of October in the Year 2016.</p><p>Failure to comply to our directives will result in the deactivation of your BFS Account and you will be requested to pay an extra charge when you intend to reactive your Account.</p><p>Thank You,<br>BFS MANAGEMENT.</p>
</div></blockquote></body></html>
--Apple-Mail-8ECBD599-112B-48FB-B287-55D0CE88FA45--

We need the body and text of the email from bfsfinance.org, not from Yahoo. Remove your name and address from the email.

clientportalonlinessi.com has been reported for fraud.

Fake email: BFS FINANCE <[email protected]>

Fake website: bfsfin.clientportalonlinessi.com

Attn: Ms. Rose,
Our system has indicated several Unsuccessful attempts to transact on your account. You are required to remit a COT/Authorization Charge of 3,000.00 USD Via the Moneygram or Western Union Money Transfer to our Cashier Information Below:
NAME: SANDRA LUCAS
CITY: MANCHESTER
COUNTRY: UNITED KINGDOM
Immediately payment is confirmed by our Cashier. Your Fund transfer from your BFS Account will be successful.
Thank You,
BFS MANAGEMENT.

Attn: Ms. Rose,
Be reminded that you are required to pay your COT/Authorization Charge. You are required to make this payment on or before Monday the 3rd day in the month of October in the Year 2016.
Failure to comply to our directives will result in the deactivation of your BFS Account and you will be requested to pay an extra charge when you intend to reactive your Account.
Thank You,
BFS MANAGEMENT.

We still need headers from bfsfinance.org. Can you post them?