Advance fee loan scams and fraudulent loan sites.
by IMFR Sat Jul 07, 2012 6:12 pm
Hello,
This may be nothing but then could be something, I was looking for an investor for a restaurant i was thinking about opening and this person sends me this...

"ABRAHAM DIYA INVESTMENT / MONEY AVAILABLE TO LOAN. This is an international investment/financial company. Our duty is to assist people or companies who are looking for financial help for different purpose. We are also investors and also help people acquire the properties they need with little interest and at any credit rate. We have been on this for many years now and we travel all over the world to visit and also for investments. We offer both Startup loans, Personal loan, Real estate loan, Venture capital, Construction loans, Educational/Agricultural loan, Mobile home loan, Debt free loans, Purchase loans, Business/Refinance loans e.t.c to interested persons from any country. If you have a property you like and you do not have the money to purchase it or you have little and need balance money for the property, we can help you purchase the property with little re-payment. Have you been turned down by your local lenders, banks or anyone, this is your time to get what you need. Do contact us through this mail if you are interested in a loan or need investor for your properties. [email protected] "

I have searched online for something to validate if this company is a scam and i am unable to find them anywhere listed, also here is his reply after i gave him a few info....

*Hello,
> > We got your message,this is an international investment and loan
> > lending company, we invest and also offer loans to interested persons for
> > any purpose. We are located in different countries but at the moment, we
> > are giving out loans from my lending branch in south america Brazil. We
> > offer loans to interested persons on other countries.Transfer of funds is
> > done through bank to bank transfer. We can loan you money if interested
> > but before then, do send us the below informations so that we can give
> you
> > more details regarding our lending.

> > *NAME:

> > *DATE OF BIRTH:

> > *ADDRESS:

> > *COUNTRY:

> > *MARITAL STATUS:

> > *OCCUPATION:

> > *AMOUNT NEEDED:

> > *PURPOSE:

> > *TEL:

> > * Await your reply.
> > REGARDS,
> > ABRAHAM DIYA FINANCIAL INVESTMENT COMP,
> > TEL: 00551157965648.*

afterwards i sent in the info and this was another reply....

*Hello,*
> * We received your mail, we will loan you the money you need but
> before then, here are the terms for the loan. *

> *LOAN AMOUNT: $60,000*
> *
> *
> *INTEREST RATE: 10%*

> *INTEREST RATE PER YEAR: $6,000*

> *INTEREST RATE PER MONTH: $500*

> *LOAN DURATION PERIOD: 5 YEARS.*

> * There is no pre-payment penalty for early payment. If you accept the
> terms, mail back so that we can proceed. Await your reply.
> *
> *REGARDS,
> ABRAHAM DIYA FINANCIAL INVESTMENT COMP,
> *
> *TEL: 00551157965648.

then he sent this in....

Hello,*
* We received your mail, the interest rate for your loan per year is
$6,000 therefore the interest rate for 5 years will be $30,000. The amount
of money you need is $60,000 so the total amount you will be paying back at
the end of 5 years will be principal amount and interest rate which is
$90,000. You can decide to pay this amount at ones at the end of 5 years or
you can choose the monthly interest or yearly interest rate payment and
principal amount payment at the end of the duration period depending on you.
*
* Before we transfer loan to applicants, it must be
registered/approved with the financial control authority here before
transfer can be allowed to know the amount leaving the country and who the
funds is been transferred to. Attached is the loan application forms, you
will have to print out the forms, fill, scan and send back along with your
identity card so that we can proceed with the loan registration/securing.
Await your reply.*
*REGARDS,*
*ABRAHAM DIYA INTERNATIONAL FINANCIAL COMP,*
*TEL: 00551157965648.*

and here is the attached application lol it came in as a JPG not pdf or any other form but photo...

I know that this board only allows certain width and height so it may have parts cropped due to being over sized .

Image
Image
Image

Now how is one to sign or fill out a photo? lol

I am not saying they are scammer's or fraud but was checking for information

Thanks
Jim
Last edited by IMFR on Sat Jul 14, 2012 7:38 pm, edited 1 time in total.
Advertisement

by vonpaso xlura Sat Jul 07, 2012 8:48 pm
It's pretty unlikely that a legitimate loan company that is in Brazil and does business internationally would not have its own domain name. Could you post the complete mail headers (Received, X-Originating-IP, etc.)? They may show that the email came from somewhere else.

As to images, you can resize them with the Gimp, ImageMagick (the actual binary is called "convert"), or other programs. The width should be 600 pixels or less.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by lalachka Sat Jul 07, 2012 9:11 pm
i also want to add that these forms look a little unprofessional. even with a fast glance, there are a few grammar mistakes, the 'Yes' No' is missing a ' and little things like these.

i'd think that a major company would take the time to make sure that their forms are written properly. JMO obviously

ETA yeah, the forms are fake. there are too many misspellings, bad grammar, weird capitalization and small details that are wrong.---i'm taking out the examples, i was told that we shouldn't point out their mistakes---
by IMFR Mon Jul 09, 2012 11:35 am
I think this is what you are referring to now the originating ip might be mine don't know...

Content-Type: multipart/mixed; boundary=e89a8f22c34f461f7b04c43fe4cb
Date: Sat, 7 Jul 2012 13:29:57 -0300 [07/07/2012 12:29:57 PM EDT]
Delivery-date: Sat, 07 Jul 2012 12:30:09 -0400
Envelope-to: [email protected]
From: Abraham Diya <[email protected]>Add [email protected] to my Address Book Brazil
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Message-ID: <CA+Ffw1Swh_6xNrb250YDQ-Cj8YB5KOdS3gZBD9u3vstqsvNcxw@mail.gmail.com>
Received:

from mail-lb0-f179.google.com ([209.85.217.179]:58929) by srv48.hosting24.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.77) (envelope-from <[email protected]>) id 1SnXtX-001zkL-J3 for [email protected]; Sat, 07 Jul 2012 12:30:08 -0400
by lban1 with SMTP id n1so14556253lba.24 for <[email protected]>; Sat, 07 Jul 2012 09:29:59 -0700 (PDT)
by 10.152.148.1 with SMTP id to1mr34022643lab.34.1341678598626; Sat, 07 Jul 2012 09:29:58 -0700 (PDT)
by 10.112.130.74 with HTTP; Sat, 7 Jul 2012 09:29:57 -0700 (PDT)

References: <[email protected]>
Return-path: <[email protected]>
Subject: Re: responding back to you
To: [email protected] [email protected] to my Address Book
X-Gm-Message-State: ALoCoQkFzGoIEqFOfU0FqSte5RvlCpIZOqQSca9uPqG+PlHNmbodwzdV6qQAgFD3/V3RqC6zpRvl
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:content-type:x-gm-message-state; bh=VXI2+IazsEwsJt1xrMouX1KRk/ssNfw+tAG30/Mbp7U=; b=Jt9nMiE0jykRxGiFb0axJIZKVJIFhtHdmoIiFo7Ms1KPaM5OKwouLJa0fiUJrxDSb9 nv+dpV+aqgW3E9OnmfcPlmC9eqKaTYu1M8A4B+/0kgMDVW+wZUBRnhBMEwkxtbobEUMl NbU+yLhAp/D684sjMFYq0KVnVGbGmLhclj3/tIwcPnQAQvwQ7qDjZ+hHKBkzKXqu5GB3 ctdcVCE36Vny9pEUdcD+2BHxmpL22fODMsWcOm169+4t47617sS2to9I02VAxXnivgg3 UVHTQmpb2vLlKNvfALoczf/51YTrpsgcC5O/DLl9vgy3Zg5csaEWchmuJLm2z0iDc+A0 5h6w==
X-Originating-IP: [201.43.96.223]
by IMFR Mon Jul 09, 2012 11:42 am
Also doing an ip check heres some more information...

IP : 201.43.96.223 Neighborhood
Host : 201-43-96-223.dsl.telesp.net.br OK
Country : Brazil


Address information

This address is an IPv4 address.

address : 201.43.96.223

It is presented in decimal.



For other ways to format this IP address, you can open
the Unfold... Conversions (IPv4 / IPv6) folder below.
Related IP adresses
IP address Type Host name DNS state
200.207.223.18 MX limao.telesp.net.br OK
200.171.222.88 MX gbrsecurity.telesp.net.br OK
200.171.222.87 MX gbrsecurity02.telesp.net.br OK
189.19.56.162 NS dnsqipbr1.telesp.net.br OK
189.19.56.226 NS dnsqipbr2.telesp.net.br OK
IP owner info (Whois)

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=201.4 ... xt=netref2
#

NetRange: 201.0.0.0 - 201.255.255.255
CIDR: 201.0.0.0/8
OriginAS:
NetName: LACNIC-201
NetHandle: NET-201-0-0-0-1
Parent:
NetType: Allocated to LACNIC
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
RegDate: 2003-04-03
Updated: 2010-07-21
Ref: http://whois.arin.net/rest/net/NET-201-0-0-0-1

OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/LACNIC

ReferralServer: whois://whois.lacnic.net

OrgAbuseHandle: LACNIC-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: 999-999-9999
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/LACNIC-ARIN

OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: 999-999-9999
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/LACNIC-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#


Domain owner info (Whois / Abuse)
Whois record :

% Copyright (c) Nic.br

% The use of the data below is only permitted as described in

% full by the terms of use (http://registro.br/termo/en.html),

% being prohibited its distribution, comercialization or

% reproduction, in particular, to use it for advertising or

% any similar purpose.

% [213.251.189.205] 2012-07-09 12:38:45 (BRT -03:00)





% You don't have permission to use this service



% Security and mail abuse issues should also be addressed to

% cert.br, http://www.cert.br/, respectivelly to [email protected]

% and [email protected]

%

% whois.registro.br accepts only direct match queries. Types

% of queries are: domain (.br), ticket, provider, ID, CIDR

% block, IP and ASN.


Abuse contacts (powered by abuse.net) :

Abuse complaints can be sent to:

[email protected]
[email protected]
[email protected]

Conversions (IPv4 / IPv6)

This address is an IPv4 address:
IP v4 :
decimal : 201.43.96.223
binary : 11001001001010110110000011011111
octal : 0311.053.0140.0337
hexadecimal : 0xC9.0x2B.0x60.0xDF
long : 3375063263

IP v6 :
6 to 4 address : 2002:C92B:60DF:0:0:0:0:0
: 2002:C92B:60DF::
IPv4-mapped address : 0:0:0:0:0:FFFF:201.43.96.223
: ::FFFF:201.43.96.223
: ::FFFF:C92B:60DF
IPv4-compatibility address : 0:0:0:0:0:0:201.43.96.223
: ::201.43.96.223
: ::C92B:60DF


well at least i know the originating ip is not mine it is his.

Thanks
by Martha Jones Mon Jul 09, 2012 3:06 pm
There's no doubt that this is a scam. Thanks for posting about it, it will help others.

Just ignore all contact with them from now on.
by vonpaso xlura Mon Jul 09, 2012 3:16 pm
^^All that means is that the scammer is telling the truth about what state he's in ("sp" in "telesp" stands for São Paulo). He's still a scammer.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10

Who is online

Users browsing this forum: ClaudeBot and 6 guests