Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

grantoffice@hfconslts.com

Post up any 419 emails you received. All persons/companies depicted in these emails are either fictitious or have had their identities copied/stolen by the scammers. Emails posted by staff are received unsolicited to their "catcher" accounts.

grantoffice@hfconslts.com

Unread postby firefly » Sat Oct 22, 2022 1:24 am

Grant scam.

Hello friend,

This is a reminder regarding your prize, so kindly write to the consultant at the email address below:
grantoffice@hfconslts.com

Best regards.

Tom Mignot,
For World Health Organization


Header:

Received: from [129.205.124.149]
Date: Fri, 21 Oct 2022 05:29:39 +0200
Message-ID: <20221021052939.Horde.OnZmduGH-Ymjo-uV7SSMGHD@webmail.etud.u-picardie.fr>
From: World Health Organization <xxx@etud.u-picardie.fr>
Subject: Grant reminder
Reply-to: grantoffice@hfconslts.com
User-Agent: Horde Application Framework 5

Originating IP: 129.205.124.149
Originating ISP: Globacom-as
City: Lagos
Country of Origin: Nigeria
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: grantoffice@hfconslts.com

Unread postby firefly » Sat Oct 22, 2022 7:20 pm

Reply received:

Dear grant Bénéficiary,

Your email has been received along with your reference number.

My office has been mandated with the verification of the particulars of all beneficiaries before commencement of payment to ascertain personal eligibility for the receipt of grant sum.

The IMF GRANT PROGRAM is aimed at providing financial support to TEACHERS, HEALTH WORKERS, RIG WORKERS, OIL WORKERS, RESEARCHERS, SMALL BUSINESS OWNERS, STUDENTS AND ENTREPRENEURS around the world.

As a beneficiary, you are advised to invest your €850,000.00 wisely.

After several stages of rigorous selection process, your name and details were awarded a grant/subvention of €850,000.00 (Eight Hundred and Fifty Thousand Euros) by the IMF through the IMG-WHO covid-19 relief program.

The IMF & WHO Teams join forces against Covid-19 to bring out the best in our shared diversity through our provision of financial support and solidarity.

THE SELECTION PROCESS:

All beneficiaries were selected from various Institutions (Public & Private), Societies, Directories, Associations and Forums via E-mail online balloting methods.

Kindly note that this is a GRANT and NOT a LOAN nor LENDING SCHEME which warrants ANY form of repayment from beneficiaries. Beneficiaries are not required to repay any money given to them as grant BUT must to ensure to use this money for the very purpose for which it is awarded, i.e., to directly or indirectly cushion the negative impact of COVID-19 in their own little ways through our provided financial support being the main goal of the IMF & WHO COVID-19 Relief Grant scheme, knowing that we cannot do it alone without global partnership, people inclusion, capacity building, research funding and job creation.

Following the outbreak of Covid-19 Pandemic and its negative global impact and due to the huge success recorded in our 1st to 3rd Phases of the COVID-19 Relief Grant scheme, IMF & WHO and its partners have finally commenced the much-awaited 4th Phase of the COVID-19 Relief Grant scheme.

IMF & WHO mobilized extra-budgetary funding to an amount of €738.3 million, an increase of 15% compared to the previous year. This demonstrates donor's and partners' confidence and the continued relevance of our partnership and support programmes. It also shows a sound financial situation of our partnership, as well as an increase in external support to our programmes and initiatives. We also work hand-in-hand with international organizations, private bodies, reputable individuals and member countries to increase the impact of our support. With grants, we financially support specific projects or operations that are in line with our external action objectives.

For final verification/screening, kindly supply the below information before referral to our paying bank:

Full Names:
House address:
Téléphone / Mobile number:
Country / Nationality:
Current location:

Once the above information is received and is successfully verified; you will be referred to our paying bank for immediate payment of grant sum to your local bank account.

Félicitations!

Yours Faithfully,

Dr. Lorence De Lattre
(Clearance officer)
IMF & WHO Partnership Covid-19 Relief Grant Office
Europe House, 32 Smith Square,
London SW1 3EU, United Kingdom


Header:

Return-Path: <grantoffice@hfconslts.com>
Received: from us2-ob2-3.mailhostbox.com (us2-ob2-3.mailhostbox.com. [208.91.199.209])
Received: from localhost (unknown [10.25.144.104]) (Authenticated sender: grantoffice@hfconslts.com)
Date: Sat, 22 Oct 2022 17:44:09 +0800
From: IMF WHO Grant Office <grantoffice@hfconslts.com>
Subject: Re: Grant reminder
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <c6450d65f486064ad93224b7f47940bc@hfconslts.com>

Originating IP: 208.91.199.209
Originating ISP: Public-domain-registry
Country of Origin: United States
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: hfconslts.com

Unread postby firefly » Sat Oct 22, 2022 7:29 pm

The so called IMF & WHO Partnership Covid-19 Relief Grant Office is not real. The fraudulent domain name shows no content and is used only for the email address, as in grantoffice@hfconslts.com.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=158603

From the domain name registration:

Domain Name: HFCONSLTS.COM
Updated Date: 2022-10-11
Creation Date: 2021-10-17

Registrar Registration Expiration Date: 2023-10-17
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Arab Drilling
Registrant Organization: ADWOC Global
Registrant Street: Tripoli
Registrant City: Tripoli
Registrant State/Province: Tripoli
Registrant Postal Code:
Registrant Country: LY
Registrant Phone: +218.214777
Registrant Email: tincodes@gmail.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: grantoffice@hfconslts.com

Unread postby firefly » Sun Oct 23, 2022 6:51 pm

Reply received:

Dear beneficiary,

This is to notify you of your successful clearance after the verification of your reference number and details for the payment of €850,000.00 (Eight Hundred and Fifty Thousand Euros).

You are now eligible to receive your grant payment.

To proceed, kindly contact our paying bank Royal Bank of Scotland (member of the Royal Bank Group), UK branch office with their contact information below:

Contact person: Mr. Albert Van Hoose (Head of Transfer and Credits Department
websites: www. rbs.com
Email: transfers.credits@rbs-ukonline.com
Phone: +447451275740

PAYMENT REFERENCE NUMBER: AQC66507

Ensure to quote your payment reference number when contacting the bank for proper identification.

Yours Faithfully,
Dr. Lorence De Lattre
(Clearance officer) IMF Grant Program.


+447451275740
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Tismi BV

The scammers are using the real Royal Bank of Scotland domain name rbs.com as the website in the correspondence only to give more credibility to their fake rbs-ukonline.com.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: transfers.credits@rbs-ukonline.com

Unread postby firefly » Mon Oct 24, 2022 5:46 pm

Reply received:

36 St Andrew Square, Edinburgh,
United Kingdom,
EH2 2YB.

Our Ref: RBSN31OZ19.

Date: 24/10/2022

Attention: Beneficiary,

Welcome to The Royal Bank of Scotland.

My name is Albert Van Hoose and my office has been mandated to process the transfer of €850,000 (Eight Hundred and Fifty Thousand Euros) to your nominated bank account, being the grant funds as approved by your benefactor, the International Monetary Funds (IMF).

In preparation for your funds transfer, kindly send your full bank account details.

NOTE:

*The account must bear your name since the money cannot be paid to a third party.

Be sure of our professional banking services at all times

Albert Van Hoose,
Accounts and Credits Dept,
The Royal Bank of Scotland,
St Andrew Square,
Edinburgh United Kingdom.

Tel: 07 (0) 031926995
07 (0) 031994884, +44 7451275740
0131 556 8555-(Toll free for UK land lines only)


Header:

Return-Path: <transfers.credits@rbs-ukonline.com>
Received: from us2-ob4-1.mailhostbox.com (us2-ob4-1.mailhostbox.com. [208.91.198.156])
From: Royal Bank of Scotland <transfers.credits@rbs-ukonline.com>
Date: Mon, 24 Oct 2022 07:49:12 +0100
Message-ID: <CAMKxwDaK9UWJdH-yuNaFwFHpPxUiQCHEJUkER0e-YPm6Bo6W3g@mail.gmail.com>
Subject: Welcome to RBS

+447451275740
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Tismi BV

+447031926995 / +447031994884
Number billable as personal number
Country or destination United Kingdom
Original network provider* Magrathea Telecommunications Limited

The Toll free for UK land lines only is stolen form the real bank website.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: rbs-ukonline.com

Unread postby firefly » Mon Oct 24, 2022 5:59 pm

The fake bank used in scam is a spoof of the Royal Bank of Scotland.

There is no content; the fraudulent domain name is used only for the email address, as in transfers.credits@rbs-ukonline.com.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=158622

From the domain name registration:

Domain Name: RBS-UKONLINE.COM
Updated Date: 2022-10-01
Creation Date: 2022-10-01
Registrar Registration Expiration Date: 2023-10-01
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: RBS INC
Registrant Organization: RBS INC
Registrant Street: 107 Rally Plaza,
Registrant City: Queens
Registrant State/Province: New York
Registrant Postal Code: 11101
Registrant Country: US
Registrant Phone: +1.9157654765
Registrant Email: rbs.uuk@gmail.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

rbsukonline.com

Unread postby firefly » Mon Oct 24, 2022 6:18 pm

The same group of scammers operate another spoof of Royal Bank of Scotland - rbsukonline.com.

Contact detials on the fake bank website:

St Andrew Square, Edinburgh, United Kingdom, EH2 2YB
help@rbsukonline.com


Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=158623

From the domain name registration:

Domain name: rbsukonline.com
Updated Date: 2022-08-26
Creation Date: 2022-08-26
Registrar Registration Expiration Date: 2023-08-26
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Domain Status: addPeriod
Registry Registrant ID:
Registrant Name: Redacted for Privacy
Registrant Organization: Privacy service

This is what the fake bank website looks like:

Image
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71118
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe


Return to Scammer 419 emails.

Who is online

Users browsing this forum: Google [Bot] and 179 guests