HSBC BANK [email protected]

The source IP address is 41.203.64.129

Geo-Location Information

Country Nigeria

City Lagos

From: HSBC BANK [email protected]

+44 7045745299


Begin Scam Email:

Dear Future Partner,

My name is Anthony Onne, I am the Chief Accountant of the HSBC Bank, 76
Hanover Street Edinburgh EH2 1HQ United Kingdom.

I got your information during my search through the Internet. I require
your assistance regarding the transaction stated here after.

I have packaged a financial transaction that will benefit both of us. As
the Chief Accountant of the HSBC Bank it is my duty to send in a
financial report to my head office at the end of each quarter.

On the course of last quarter financial report, I discovered that my
branch in which I am the Chief Accountant made six million seven hundred
and fifty thousand U.S. dollars ($6,750.000.00) which my head office is
not made aware.

This stated amount accrued from fluctuation of the foreign exchange rate
of the Western Union Money transfer between the U.S. Dollar and the Great
British pounds. I have since placed this fund on what we call SUSPENSE
ACCOUNT without any beneficiary.

As an officer of the bank I can not be directly connected to this money,
so this informed my contacting you for us to work together so that you can
assist to receive this money.

All I need from you is to stand and receive this fund as the a
beneficiary. I have worked out all the modalities and it is safe. If you
accept this offer to work with me, I will appreciate it very much.

As soon as I receive your information response i.e.

Telephone number
Home address,
Country
Age
Sex
Occupation
Scanned copy of your id

I will forward details to you on how we can achieve it successfully.



Yours Sincerely,

Mr Anthony Onne.

Tel: +447045745299

End Scam Email

Header Details:

Delivered-To: xxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs59171wib;
Wed, 26 Oct 2011 16:48:41 -0700 (PDT)
Received: by 10.204.145.15 with SMTP id b15mr27668322bkv.52.1319672914018;
Wed, 26 Oct 2011 16:48:34 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.comfort.com.ua (mail.comfort.com.ua. [193.58.254.21])
by mx.google.com with ESMTPS id n1si1913374faa.119.2011.10.26.16.45.02
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 26 Oct 2011 16:48:33 -0700 (PDT)
Received-SPF: neutral (google.com: 193.58.254.21 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=193.58.254.21;
Authentication-Results: mx.google.com; spf=neutral (google.com: 193.58.254.21 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost.comfort.com.ua ([127.0.0.1]:62965 helo=comfort.com.ua)
by mail.comfort.com.ua with esmtp (Exim 4.69 (FreeBSD))
(envelope-from <[email protected]>)
id 1RJDD3-000NWQ-Vd; Thu, 27 Oct 2011 02:48:39 +0300
Received: from 41.203.64.129
(SquirrelMail authenticated user 123)
by comfort.com.ua with HTTP;
Thu, 27 Oct 2011 02:48:37 +0300
Message-ID: <[email protected]>
Date: Thu, 27 Oct 2011 02:48:37 +0300
Subject: PARTNERSHIP REQUIRED FROM HSBC BANK
From: "HSBC BANK" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=cp1251
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

Date: Tue, 24 Apr 2012 02:43:24 -0700 (PDT)
From: HSBC SAVING LOAN COMPANY [email protected]
Reply-To: [email protected]

Begin Scam Email:

Need Loan? Contact us with Loan Amount$Loan Duration

End Scam Email



Header Details:

Delivered-To: xxxxxx
Received: by 10.180.98.132 with SMTP id ei4csp104882wib;
Tue, 24 Apr 2012 02:47:26 -0700 (PDT)
Received: by 10.50.186.168 with SMTP id fl8mr9185848igc.68.1335260846018;
Tue, 24 Apr 2012 02:47:26 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm7-vm0.bullet.mail.sp2.yahoo.com (nm7-vm0.bullet.mail.sp2.yahoo.com. [98.139.91.192])
by mx.google.com with SMTP id b7si11819128icw.76.2012.04.24.02.47.25;
Tue, 24 Apr 2012 02:47:26 -0700 (PDT)
Received-SPF: neutral (google.com: 98.139.91.192 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.139.91.192;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.139.91.192 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass [email protected]
Received: from [98.139.91.70] by nm7.bullet.mail.sp2.yahoo.com with NNFMP; 24 Apr 2012 09:47:25 -0000
Received: from [98.139.44.73] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 24 Apr 2012 09:43:25 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 24 Apr 2012 09:43:25 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 83565 invoked by uid 60001); 24 Apr 2012 09:43:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1335260604; bh=qecKGR7xorg173miTSo73Jw3Q4kw4XwVxEg0fD7Pa7k=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=MRZ18mOq50H04Cw8TgbIW9GIXJDHpPdXUv+BFpSKp1CT/1+oUMxUuNFBUS+IkgnPVR8EKBhlQb5Qa/nGksn9xuheVPlJff03LKAju1xduCOwF6RmCtLZ1Tlt+uW4SHhIAcBsdh05uNs1YWFAc1im+qGLExr9+aKL1kar43OCTJU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=iz3BwDO7YXyD290iV0vLmgdCQidSmLjWQU6wnQJ1cT2VxgdiEKnUff/VkJGhIz/g/Yamn8KPqoWan6yoY1wIqdawqV8HB/e4oI9v2UDXlvJFYnJaF0Ix+lcxjNCVoPeD1UrdjKJw1amZrAMYb7E3XuNjoJsiPgLnJomJSHVFyNc=;
X-YMail-OSG: D7u1fkkVM1kfx3T_nJ6XMCf4Emn48MWoDC5xHvFQjPa55N7
WeQMXHWDD9m1P8uN6L8_vwbGL.D3ECtQeFI7rWlfuljlAzV0kFyMU7yrlI8q
xCPmOI2VK_3Hpm4IsNrOZ8wyHaHWgdK.WkxAeuXsPgp27Z3DMnH1z326uo2B
rXo_.NBjG_jjARh3L3hnqoC8hVvBv.t0dcAgQMkBTiBaJCvzjblJdrYWsHZ5
QQKvq__lPZXBCn0DMgeQArLNTHxGDB_pbQ_0B4t0tjErtNgjshr6uS37NJOV
s8kjoDXPgPlWZPNsel8Ma8ZpIvEXyZomuThiWJCTxR8SiEtaWE8kSmWvB8XB
XgpzYdBpbxUWnqhkVbajU55s_8Z18_D5iahRXVyZ7giTKz.rOm317NA5m89X
Nm4dj.M4lj22QfDRNvb0iNyOXh86WOJkLNBGIMeFXrYd4.uV5ddBuiM.qYQV
6cE2B4y8p_Soro8dYSudJmT7fYix3
Received: from [174.142.214.247] by web181614.mail.ne1.yahoo.com via HTTP; Tue, 24 Apr 2012 02:43:24 PDT
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Tue, 24 Apr 2012 02:43:24 -0700 (PDT)
From: HSBC SAVING LOAN COMPANY <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="609317258-400136363-1335260604=:81477"

--609317258-400136363-1335260604=:81477
Content-Type: text/plain; charset=us-ascii

From [email protected]

+447031921266 00447031921266

+44 7031921266


Begin Scam Email 2

HELLO CLIENT

WE GOT YOUR MAIL WERE UNDERSTOOD,REGARDING YOU LOAN IN
OUR COMPANY HERE IN LONDON,I ADVISE YOU TO CHECK THE ATTACHMENT
IMPORTANT DOCUMENT IS ATTACH FILL THE LOAN APPLICATION FORM CAREFULLY
AND THE LOAN WILL BE TRANSFERRED TO YOU DEPENDING ON YOUR EARLY
RESPONSE.I WILL NEED YOU TO GET BACK TO US AS SOON AS POSSIBLE

BEST REGARD
MRS.JOAN ADAMS
LOAN OFFICER LONDON

End Scam Email 2





Attachment to Scam Email 2

HSBC Savings Loan Application Form.pdf 62kb


Details from Scam Loan Application:

2nd Floor Berkley Square House Berkley Square

London W1J6BD

London . United Kingdom

Email: [email protected]

Tel: +447031921266


Header Details :

Delivered-To: xxxxxx
Received: by 10.180.98.132 with SMTP id ei4csp146208wib;
Tue, 24 Apr 2012 17:30:03 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.50.36.195 as permitted sender) client-ip=10.50.36.195;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.50.36.195 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.50.36.195])
by 10.50.36.195 with SMTP id s3mr12294122igj.27.1335313802799 (num_hops = 1);
Tue, 24 Apr 2012 17:30:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=TOdObcAj5KnryqAfkzr/xDhp/aAf7JbCfrT9dMBFp/Q=;
b=lJSpDLEaGOsEcL4UnSKdbiNJyZIExo6BY23YToctbPSxmzoa/XU6vpRLW+fQBZPSA4
IFxLU9TIE00eZHFIiZiJtJlNxMsKfF4QWpDjprnuI735bnhzPYWQB0cGWCyGqagEFcqB
u0XN8bEK03t0nYcN6zCGZk6Ez8qsYCVU1lRex8VXzuoocCHrU5StuxSWPZEG5vk+6fZG
rOoPQL7ialSkK9AoGi/EH0ReoWqRTMGLHNL6XM0Cz8sGFndE2SGELbPtnA9CmZXb62up
92ot82O2o/y340VTVLyh2n7GeUSSn8bhWQ1psyy/uCwn5/UwOKgghw+XiVpj0nrOAVTF
Kzvg==
MIME-Version: 1.0
Received: by 10.50.36.195 with SMTP id s3mr12294122igj.27.1335313802793; Tue,
24 Apr 2012 17:30:02 -0700 (PDT)
Received: by 10.64.143.35 with HTTP; Tue, 24 Apr 2012 17:30:02 -0700 (PDT)
Date: Wed, 25 Apr 2012 02:30:02 +0200
Message-ID: <CA+jmhZGbaBjXhDFOjFJqWSRV-amtT+FSL8HNePx4Fks6MYYx4g@mail.gmail.com>
Subject: ATTENTION: OPEN THE ATTACHMENT IN YOUR MAIL AND FILL THE LOAN
APPLICATION FORM CORRECTLY AND RETURN IT FOR PROPER VERIFICATION AND PROCESSING
From: HSBCSAVING LOANCOMPANY <[email protected]>
To: xxxxxx
Content-Type: multipart/mixed; boundary=14dae9340585e1131e04be75f895
Bcc: xxxxxx

--14dae9340585e1131e04be75f895
Content-Type: text/plain; charset=ISO-8859-1