Neoventa Medical & Health Employment Scam

BEWARE - This scammer has hi-jacked an actual company name and created a fake website that even has links tied to the valid company website. They search job boards looking for persons seeking work for jobs like Business Analyst and Data Analyst. They conduct a "chat" interview and provide very professional looking paper work. The scam, I believe, is to have you deposit a check to purchase office equipment so that you can work remotely. They say they'll send you a check to deposit and instruct you to purchase the office equipment from a specific vendor. Then it changes to "can you do a remote deposit". I caught on before it was too late, but these scammers are VERY slick. The fake website URL is https://neoventamedicalandhealth.com/. Someone by the name of "Helen Johansson" will contact you. They have pictures of actual past employees on the fake website, including "Helen Johansson", who used to work for the company but hasn't in years. They have a picture of the old CEO on the website. It's all very slick.

Welcome to Scamwarners,

Do you have any emails from neoventamedicalandhealth.com .

If so, post them. Remove your personal information from them prior to submitting.

How do I post an e-mail? Do I copy and paste the contents, or save the e-mail as a file and attach?

Domain Name: NEOVENTAMEDICALANDHEALTH.COM
Registry Domain ID: 2228935438_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2018-02-18T04:43:46Z
Creation Date: 2018-02-18T04:43:46Z
Registry Expiry Date: 2019-02-18T04:43:46Z

Thank you for your interest in Neoventa Medical. If you wish to be contacted by us, please enter and submit your request below.

If you want technical or clinical support, please send your request by using our Support form.

Neoventa Health & Medical (HeadQuarter)

Address:

Norra Agatan 32

Molndal, 431 35

Sweden

[email protected]

Neoventa Medical & Health
226 Lowell Street, Wilmington, Massachusetts 01887, United States

+1 669 225 2326

669-225-2326
(669) 225-2326
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)

Copy and paste.

Remove your personal information from them prior to submitting.

Also look at my signature line and post the email header.

NEOVENTAMEDICALANDHEALTH.COM is in the process of being reported for fraud.

Please post any emails and email headers from the fake company. Remove your personal information prior to submitting.

Dear Applicant,
Your application for the position stood out to us and we would like to invite you for an online job briefing and interview [via gmail hangout chat ] to discuss the role and get to know you a bit better.

You are to set Up a Screen name with gmail hangout at (http://www.gmail.com) and add up the HR Manager screen name via gmail hangout: [email protected]

The interview will last about [60] minutes and you’ll have the chance to discuss the position and learn more about our company. If interested, contact Mrs Helena Johansson via email ( [email protected] ) to let her know if the time frame works for you.

Looking forward to hearing from you,

All the best / Kind regards,
Human Resources,
Neoventa Medical.

^^^ was that sent by the gmail address or @NEOVENTAMEDICALANDHEALTH.COM ?

This is how the e-mail address appears:

Helena Johansson <[email protected]>

Can you please post the email header. This will help us shut down the fake site.

How to find email headers >> https://www.iptrackeronline.com/how-to- ... eaders.php

Remove your name and email address prior to submitting.

Is this what you're looking for? I used the instructions on how to extract header information from Outlook 2010.

Return-Path: <[email protected]>
Delivered-To: xxxxxx
Received: from dovdir2-asc-02o.email.comcast.net ([69.252.207.25])
by dovback2-asc-06o.email.comcast.net with LMTP id 0DnwI2nbllrycgAAXrxjGA
for <xxxxxxx>; Wed, 28 Feb 2018 16:40:09 +0000
Received: from dovpxy-asc-02o.email.comcast.net ([69.252.207.25])
by dovdir2-asc-02o.email.comcast.net with LMTP id yJC/I2nbllqEEAAAb9roog
; Wed, 28 Feb 2018 16:40:09 +0000
Received: from resimta-ch2-22v.sys.comcast.net ([69.252.207.25])
by dovpxy-asc-02o.email.comcast.net with LMTP id WMFNNGfbllqjPQAA2OtSng
; Wed, 28 Feb 2018 16:40:09 +0000
Received: from sender-op-o13.zoho.com ([135.84.80.198])
by resimta-ch2-22v.sys.comcast.net with SMTP
id r4lxeewxzbDAxr4m0eVCNE; Wed, 28 Feb 2018 16:40:09 +0000
X-CAA-SPAM: 00000
X-Authority-Analysis: v=2.2 cv=a4tAzQaF c=1 sm=1 tr=0
a=g71I+WmsykovgU3JfvZpig==:117 a=khwyK8DuSVkA:10 a=Op4juWPpsa0A:10
a=pGLkceISAAAA:8 a=o8nwK2ShAitzgKA3LPIA:9 a=7JnVdfJYZUroMXOA:21
a=eUu0bUbw4-7W2lpP:21 a=QEXdDO2ut3YA:10 a=GpNuSyY4SnQA:10
a=Xg_aGhHi94v4JQUi7r8A:9 a=lcLOg9udKnB6pgUf:21 a=uQsvnGv563lf55mU:21
a=N62KCoqTIeG_vh5X:21 a=_W_S_7VecoQA:10 a=Amh3JDql0N393XT8uzAA:9
a=n3BslyFRqc0A:10 a=QGevMSd5eboA:10 a=azwu7gVAgGtKtiJuTu8I:22
X-Xfinity-Message-Heuristics: IPv6:N;TLS=0;SPF=1;DMARC=
Received: from mail.zoho.com by mx.zohomail.com
with SMTP id 1519835987545826.6200532754912; Wed, 28 Feb 2018 08:39:47 -0800 (PST)
Date: Wed, 28 Feb 2018 08:39:47 -0800
From: Helena Johansson <[email protected]>
To: "Flochoar23" <[email protected]>
Bcc: xxxxx
Message-Id: <161dd48be33.c55ac10981546.457635305490232256@neoventahealthandmedical.com>
Subject: Interview With Neoventa Medical
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_260330_1894525786.1519835987508"
X-Priority: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
X-Zoho-Virus-Status: 1
X-CMAE-Envelope: MS4wfN7sVHSrFToPdqArOCv6WeHb4Oeog8Q4p6/7+89gslSFuDjgjMWWU/UAID1UxSWnD6I5GRKaA7iIpv1Cap/Hg6xqHD4I6VOigBL
bfGvairucVzpIqcA9
RpCuODnTUUCmBKKrJfOZKqmuOy7TzbNk0YN2Nk2VM6cDCtLaUGtqz8V4M7l1Zdak
HEqy7l8xeSWWq//2R+vftR32iRTEeIkGExA=

Thank you. It is exactly what we need.

Phew! I was afraid I was going to let you down. Thank you for your assistance in dealing with this or these con artists!

I had almost an identical experience. Same name: Helena Johannson inviting me for an interview (I have been on several job sites lately). I finally called the real subsidiary company out of Massachusetts after she had a $4,000.00 check FedEx'd to my house claiming it was to pay for my "mini office", but instructed me to screenshoot the front and back of endorsed check after processed by financial institution and to also screenshoot my deposit receipt "for accounting purposes". The gentleman I spoke to said he has received numerous calls beginning last week regarding this, and Neoventa Sweden is investigating, as she broke copywritten rules, and a lot more. She has attempted to message me this about the check, but I have not responded. I did, however, file a report with the https://www.usa.gov/online-safety this evening. I have spent hours researching the company and her specifically for over a week, and this is the only site that hinted at anything deceptive. Hell, she even emailed me a temporary ID badge! Any advise as to where to proceed in order to get these people caught?

Welcome to Scamwarners,

Post the emails sent to you along with any email address and phone numbers. Remove your personal information prior to submitting.

You can report this to IC3 https://www.ic3.gov/default.aspx

ETA: Any checks received should be given to Fedex with with mailer package. Tell them it is a scam.