Evergreen planners corporation, possible scam?

Hello,

This is my first post here and I deeply apologize if I am going to bypass any customs relating to new members but this is very urgent and very important.

This is slightly sketchy as I am going off second hand information but I'll try to get more details this evening.

My sister-in-law who has recently moved to UK received a job offer by email very recently (maybe this week) as far as I could gather with an offer of accountant assistant position. As I understand she had her first "training today" which involved going to the bank and withdrawing money from her own account and sending it to Ukraine (!!!) via webmoney and some other payment system that I am not familiar with. The amounts were 1200 pounds and 1050 pounds. Next she had to do a questionnaire on the differences between those payment systems.

I got the website of the company which is http://evergreeninplanners.com/. I ran a whois search on that page an found that it was registered on 26th of August this year for 1 year. All signs point to a scam but I need confirmation.

It's a scam.
The website is a clear fake. Not only do we have the recent 1 year registration, but there are clearly fraudulent claims on the site, and a quick google shows the content is copied too.

https://encrypted.google.com/search?q=%22Our+marketplace+is+therefore+comprised+of+businesses+spanning+many+diverse+industries,%22&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a&oei=fRxqTsCkHqnm0QG1i42TBQe

And this is the real building at their supposed address: http://maps.google.com/maps?q=%221967+E+Evergreen+Blvd,+Vancouver,+WA+98661+%22&hl=en&client=firefox-a&hs=L6h&rls=org.mozilla:en-US:official&prmd=ivnsm&filter=0&bav=on.2,or.r_gc.r_pw.&biw=1366&bih=573&um=1&ie=UTF-8&hq=&hnear=0x5495af537788e5af:0xcf9644e724c59f4c,1967+E+Evergreen+Blvd,+Vancouver,+WA+98661&gl=us&ei=Th5qTsOqKqni0QH5z_D0BA&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CBYQ8gEwAA

As you can see it's not exactly the building pictured on the website.

Even if the site weren't a clear fake, there is no such thing as a legitimate job that involves receiving and forwarding money. Chances are they transferred money to her account and had her withdraw and send it. The problem is, that money is stolen. By helping to move that money, she has actually participated in laundering money, which is a serious crime that can send her to jail. She needs to break off all contact with these scammers immediately.

If you can get any of the emails they sent to her, please post them here so we can work on getting the fake site closed down.

Thank you very much for your reply. I was afraid that this would be the case. She has been told already

here's a header from one of the emails. I assume that's what you're looking for.

From [email protected] Thu Sep 01 17:49:14 2011
Return-path: <[email protected]>
Received: from [98.139.52.206] (port=47885 helo=nm9.bullet.mail.ac4.yahoo.com)
by mx19.mail.ru with esmtp
id 1Qz7dp-0003OS-00
for [email protected]; Thu, 01 Sep 2011 17:49:13 +0400
Received-SPF: none (mx19.mail.ru: domain of [email protected] does not provide an SPF record) [email protected];
X-Mru-BL: 0
X-Mru-PTR: nm9.bullet.mail.ac4.yahoo.com
X-Mru-NR: 1
X-Mru-OF: unknown (ethernet/modem)
X-Mru-RC: US
Received: from [98.139.52.190] by nm9.bullet.mail.ac4.yahoo.com with NNFMP; 01 Sep 2011 13:49:11 -0000
Received: from [98.139.52.147] by tm3.bullet.mail.ac4.yahoo.com with NNFMP; 01 Sep 2011 13:49:11 -0000
Received: from [127.0.0.1] by omp1030.mail.ac4.yahoo.com with NNFMP; 01 Sep 2011 13:49:11 -0000
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 62563 invoked from network); 1 Sep 2011 13:49:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1314884951; bh=8wB1rCqCKsVC1/yu70N4Mro1LYk4e6TVijK2r01T43U=; h=X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Date:From:Organization:To:Message-ID:Subject:MIME-Version:Content-Type; b=ASbNcY+jru3aSEAFfl+AX/Ajg319O7YBHhU4YzC09FCTRiaMfh6fWdvCUhO0dN6i5xAt5cUgxK5QnAP0qNLH6J5jvZO2fuRArxfccYKMYnvTs0isln4+E69ik3b6UvoDhHqGEca25UIXW3MCPV0PweCHUUSBUqiYzK1tcPL+ZA0=
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: .jYs4_IVM1mVaEIxihGKmLcAXWdIicne_cPOvNMBRMVCVxA
tub3nL8JTGcMf6Pa_83.2DTIwJUgvKyVfXS.bkAoWBKG6xBwk_ZOsdrVZHpT
mP7UWTq06pPyp4PSGcS1XJipNoAFitoZHhMv3tyS6A2WB79m2RCAkk1L.mun
z.Hiu1If7jw7nE_ziS3EweT4odhCLZ.N6EjTHaA.CrrjmkWybglqF8Ycrkfv
KW_X.0z2NjJLn3YRAMpHHNbQ.nleflwcsU3RpCCT0Qk.bJ1rmmQXmQMgZyRh
OlU0J_Rz0xkgzNMrX.Cf2o7WAdYHj5QDs7WjjZZJ5cz_X.C5GDBVeNAIm0du
DIGE8NaJAEQVwEKN3otBDDStAfyAxqrR3kNk-
X-Yahoo-SMTP: Wl_obh2swBDxUK9r.nLn0SetTpb6K3Q6
Received: from [68.142.200.11] ([email protected] with plain)
by smtp114.biz.mail.mud.yahoo.com with SMTP; 01 Sep 2011 06:49:10 -0700 PDT
Date: Thu, 1 Sep 2011 14:34:54 +0100
From: Mary Allen <[email protected]>
Organization: Evergreen Planners Corporation
To: xxx
Message-ID: <[email protected]>
Subject: =?utf-8?Q?Recent_vacancies_For=C2=A0Firsova_Natalia=C2=A0?=
MIME-Version: 1.0
Content-Type: text/html
Authentication-Results: dkim=pass, [email protected]
X-Spam: Not detected

?

Thanks for the headers! I'll definately need those. Could you post the content of the emails as well please? I'll make sure that the website is listed with our sitekillers

Hello,

This is my first post here and I deeply apologize if I am going to bypass any customs relating to new members but this is very urgent and very important.

There are no customs and certainly no need to apologise. We're here to help and prefer anyone asking for help to come straight for the point. Lurking first is not expected.
It would be better for your S-I-L to tell her bank before they find out the transfer or banked check is bogus.

Thanks for the headers! I'll definately need those. Could you post the content of the emails as well please? I'll make sure that the website is listed with our sitekillers

Sure.

Here's the first one

Hello xxxxxxx xxxxxxxxxx - removed name - Jillian :

We're looking for :

Vacancy: Accounting Clerk(No Experience Required*)
Full-time, part-time, and seasonal positions available
Location: United Kingdom (We have about 50 local managers in different areas)
ANNUAL BASE SALARY:
FULL TIME :£22600plus
PART-TIME :£18650plus

- You have to be at least 18 years old
- Above-average oral and written communication skills
(English; written & verbal) **
- Willing to start asap!

*We offer:
1. Free Online Courses and Education
2.Accounting Clerk Program [ACC-014]

**Orally and in writing

Email back and We will send you an email with information on how to continue.

HR Manager
Mary Allen
Evergreen Planners Corporation

Then the second one

Here is the detailed information about this vacancy.

If you are interested please fill out the "Application form" and send
the application by email.

P.S The application must be completed in full detail and must be signed
Our manager will call you within 1-2 working days.



Sincerely , Mary Allen
HR Department , Evergreen Planners Corporation

Then the third one

In attached file you can find Training pack about training
process.
Your training will start on (Tuesday,September 06, 2011)


Please confirm that you are ready to start the training
as soon as possible.

P.S. You can ask any questions about the job at +44 020 3239 9514 .


With respect,
Mary Allen,
Evergreen Planners Corporation

There are no customs and certainly no need to apologise. We're here to help and prefer anyone asking for help to come straight for the point. Lurking first is not expected.
It would be better for your S-I-L to tell her bank before they find out the transfer or banked check is bogus.

That's the thing. I've been calling her and my brother asking them to tell the bank. Hell, last time I called I directed their attention to this thread. Hopefully they can figure this out.

has the financial strength to fund every qualified deal. Our current credit facilities are believed to be the largest in the Merchant Cash Advance industry. Despite the uncertainties of the recent economic environment, our business model,

Gives about 12 hits in Google with different company names to each one. ????????
CLONE SITE http://moultonalliance.com/
http://cimarroncorp.com/
http://gtatraiding.net/index.php DEAD
MORE
http://www.advancemedenver.com/our-company.html
http://www.myspace.com/nikkiadvanceme

http://glenlakeadvisors.com/ BUILDING PIC IS NOT AT ADDRESS GIVEN WHICH IS ALSO HERE
http://montanafincorp.com/contacts.php DEAD
http://vermonfundtsolutions.com/contacts.php DEAD
http://gtatraiding.com/contacts.php DEAD
http://gtatraiding.net/locations.php DEAD
http://montanafincorp.com/locations.php DEAD
http://www.myspace.com/nikkiadvanceme
Prolific bastards and been at this game a long time.

FAKE PHONE NUMBER?
+44 020 3239 9514
https://www.numberingplans.com//?page=a ... ub=phonenr

Note: This telephone number is most likely a Guernsey number. Specific information on this number range is not available. This might mean that this particular telephone number does not exist. Should this be incorrect, be sure to notify us.

It's wrong anyway 01481/+44 1481
0020 3239 9514

Information on phone number range +20 3 XXXXXXXX
Number billable as geographic number
Country or destination Egypt
City or exchange location Alexandria
Original network provider*