support@acctdept.org

[Big Al]

Atten:

My name is Mrs .Erica White . The head of Foreign Operation of HSBC Bank London, United Kingdom. You are one of the lucky scam victims who was recently awarded with some compensation funds deposited in our bank in favor of your name. Your email address and name was given to us to contact you to receive your funds. the total sum of £10.000.000 Pounds sterling. We have 10, millions pounds Sterling to transfer to you by next Week.


please Kindly contact our Remittance department for your funds Email: support@acctdept.org


Awaiting for your Urgent Response

Mrs.Erica White

Header:

Received: from 10.197.33.11
Return-Path: < ericawhite6069@gmail.com >
X-Originating-Ip: [209.85.216.67]
From: erica white <ericawhite6069@gmail.com>
Date: Thu, 20 Oct 2022 05:35:37 +0000
Message-ID: <CAJg1o_6_WubPg_r6D6nSO0OYg=25ZLWE+S_hyyZEeQUoYZdLbw@mail.gmail.com>
Subject: The head of Foreign Operation of HSBC Bank London, I need your urgent response

[Big Al]

Dear

Thanks for Contacting us.. regard your request.
Choose your option wish you want to use to receive your compensation funds.
1, Bank to Bank wire Transfer
2, ATM Master card.
this is the information will need from you below to process transfer of your compensation funds to your designation Bank in your country.
1, Full name:
2,bank name
3 account number
4. bank address
5 swift code
6. passport or Government ant id card
7. Current Occupation
8. Age
9. name of Country
10.Whatsapp number
11, Sex
12, Amount to receive is 10 millions pounds sterling
Awaiting for your Response
Robert Mankison
Head of Remittance department

Header:

Delivered-To:
Received: by 2002:a05:7010:740c:b0:30a:a301:674c with SMTP id z12csp597071mdd;
Thu, 20 Oct 2022 12:28:11 -0700 (PDT)
X-Google-Smtp-Source: AMsMyM7Bn7b1gqzioXIrTOapYe91PMsufFD6RnBXUoNv8g5qUwNhXCRxCc6xPs0eFkrC4/jme6Jq
X-Received: by 2002:a17:902:b942:b0:178:4a7e:da04 with SMTP id h2-20020a170902b94200b001784a7eda04mr15527094pls.8.1666294090875;
Thu, 20 Oct 2022 12:28:10 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1666294090; cv=none;
d=google.com; s=arc-20160816;
b=Vu9p9U8KvcsSsf7Ve4yepKBx8pX1qH8ufYnPt8dYDxnFsVaQVjHypGxzL07ZqCBzsq
kyPUz9X4PZ52iBTPAseELYgpvG3bnrWkmwwC9KHxpKTT0nXM71OmQjw216TDO6CqMS3i
RKR20N7rm+26qIxlKY9OnKUfTLW66AUVQqScAxxvUTaxOK/7NXDcoKbX9J4txg7PHu2X
P/5LmqEQftd9A5s6u9K3i9fd9ZQWjnED4Xbi4+fEgwotDdkY8jTy/iPlkE2+5yevqBYr
2OJ/AlDBXn7uqnlDAwGcN/A1YFI0ynEfmEPfY/bMw59KOGE1lJ3xKQ1TCvJDRc83MP4O
2X8g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=importance:mime-version:subject:references:in-reply-to:message-id
:to:from:date:dkim-signature;
bh=wCqrC7PihQBj2OALMSYKrNBGKonRpVtjEpP3bBhlfmg=;
b=Ij6OCBHY66wx3LpUWd2t8JVdf1qvpZvsXkdyuWK4BQsSl1bHsSFVUXL0tHagRYRpav
isxHGNKOYhA8Aq3q2le4zH+DuRIHzEUZP+TYSkKosj7Eh6K674MjGsnEMQsZ4jQXQelx
+EjSK1/tnhop1X8l8pOhvl1bv7WaA2ADLgaTg0UDtZZADQeYWRCUkHy5dozCyEEAdOJG
UU03/0Oz4as05oYrAlIDDYGVs3ZNtdckaOhYCHqudd9OBJrdts0hUv1HG3O2efKBPGag
e5CRxYq6KI9HHiGYSs7gVxs603kVHArRwLcAg/6teMcMu5wi01dDGh33i+6YWwBVjOX5
D2rQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@acctdept.org header.s=default header.b=tiO3BcEa;
spf=pass (google.com: domain of support@acctdept.org designates 198.54.127.59 as permitted sender) smtp.mailfrom=support@acctdept.org
Return-Path: <support@acctdept.org>
Received: from MTA-06-3.privateemail.com (mta-06-3.privateemail.com. [198.54.127.59])
by mx.google.com with ESMTPS id h10-20020a170902748a00b001865c55049dsi4870157pll.570.2022.10.20.12.28.10
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 20 Oct 2022 12:28:10 -0700 (PDT)
Received-SPF: pass (google.com: domain of support@acctdept.org designates 198.54.127.59 as permitted sender) client-ip=198.54.127.59;
Authentication-Results: mx.google.com;
dkim=pass header.i=@acctdept.org header.s=default header.b=tiO3BcEa;
spf=pass (google.com: domain of support@acctdept.org designates 198.54.127.59 as permitted sender) smtp.mailfrom=support@acctdept.org
Received: from mta-06.privateemail.com (localhost [127.0.0.1]) by mta-06.privateemail.com (Postfix) with ESMTP id 1A1E318000BB for < >; Thu, 20 Oct 2022 15:28:10 -0400 (EDT)
Received: from APP-18 (unknown [10.50.14.242]) by mta-06.privateemail.com (Postfix) with ESMTPA id E9A3818000A1 for < >; Thu, 20 Oct 2022 15:28:09 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=acctdept.org; s=default; t=1666294090; bh=RGqptFdRBFCuMEJEcOjMSFONiqypMJuFT2UWDmCAfdc=; h=Date:From:To:In-Reply-To:References:Subject:From; b=tiO3BcEaAn2oup6RwwmMJPJjOwpQdeQ8nd0IFHVCd4uD9zh0IsPxJHG8Jwte5dF63
Hi4Zq0XEnFy6yafkIslKGfctNhBbN35mdiz5Xys26EYCXSQaRbwmRyo3OioOBI/Sld
uOExUfNj1Eu6uUBvYWBS74c+SEclT6JSukjE5gHEFtpdQdlZUO4vyMteFfSPsc/gf3
+QJVy4xFZSkt9kqk1Zdy0F2Tlzdj3744TJ+DIEiiPab3kBK/x16WZGQlGyZVZS/QiQ
aMLIMjW8V7UzL76jX+7aTzbbCTth3ulaM9ifLUuua73aHRf8imNdaOdBTr6WGzStqd
ntdLSgWPNZTEA==
Date: Thu, 20 Oct 2022 15:28:09 -0400 (EDT)
From: "support@acctdept.org support@acctdept.org" <support@acctdept.org>
To:
Message-ID: <661153169.1326443.1666294089855@privateemail.com>
In-Reply-To: <CAHwE6=QyXzMw=-QSC=k8xKuOWc7S51aLjHNVukpiiDX0YEm-7w@mail.gmail.com>
References: <CAJg1o_6_WubPg_r6D6nSO0OYg=25ZLWE+S_hyyZEeQUoYZdLbw@mail.gmail.com> <1467741126.1111682.1666270810223@mail.yahoo.com> <CAHwE6=QyXzMw=-QSC=k8xKuOWc7S51aLjHNVukpiiDX0YEm-7w@mail.gmail.com>
Subject: Head of Remittance department. send your banking detail to start process immediately
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_1326442_1472393951.1666294089850"
X-Priority: 3
Importance: Normal
X-Mailer: Open-Xchange Mailer v7.10.6-Rev28
X-Originating-Client: open-xchange-appsuite
X-Virus-Scanned: ClamAV using ClamSMTP

------=_Part_1326442_1472393951.1666294089850
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

[firefly]

The fake site used in scam is a spoof of HSBC Bank.

There fake site shows no content and is used only for the email address, as in support@acctdept.org.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=158601

From the domain name registration:

Domain Name: acctdept.org
Updated Date: 2022-03-21
Creation Date: 2022-01-19
Registry Expiry Date: 2023-01-19
Registrar: NameCheap, Inc.

Domain Status: ok
Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: Privacy service

[Big Al]

Dear

I got your Banking Detail now and I D, i have just forwarded it to the transfer department to verify and start the process immediately. after the process have be done. Your compensation funds will transfer into the designation bank account ,
you can add me on WhatsApp. +447459659643 and write me also in WhatsApp

i will update you shorty.

Mr.Robert Mankison

Head of Remittance department

Phone: +447459659643
Number billable as mobile number
Country or destination United Kingdom
City or exchange location
Original network provider* Lycamobile UK Limited

[Big Al]

Dear

We just fix your bank account details you send to me in our wire transfer system and we find out that your funds was deposited in an ex scrow account and the account is dormant. So you need to open an non residential account in your name to enable us use in transferring the funds to your destination bank account in your country and as you know, zero account is not open anywhere in the world, so you have to open it will any amount in our bank and whatever amount you use to open the non residential account will still reflect in your non residential account. I will appreciate if you understand and comply with us.

Since you are not a citizens of United Kingdom. You need to open non residential account with any amount of money.

It should be minimum of 300 pounds stealing is Equivalated to $350 and it also reflect in your new non residential account and also be send back to you immediately

method of making Payment of opening non Residential account

1, Via Bitcoin
2. RIA Service
3. money Gram

Choose your means to make the payment to open the non residential and get back to me
Awaiting for Your urgent Respond

Mr. Robert Mankison
Head of Remittance department

[Big Al]

Dear

How was your weekend. i hope you had a nice rest. Am so sorry for my late Respond. our bank does not work over the weekend.

According to your email, the Remittance department give means for you to make payment for deactivation of the Dormant account.


Here are the means to make the payment again

1, Via Bitcoin

2, Via money Gram

3, Ria Service

4, iTunes Gift card or Amazon gift Card

Choose your means and get back to me.


Awaiting for your Respond


Mr. Robert Mankison