Scammers abusing stolen identity of Major Chrissy Cook

[firefly]

The scammers claims to be Major Chrissy Cook.

The real one was subject of media articles in 2014, when she made history as being the first female Bradley commander leading her crew to "Top Gun" status during gunnery: https://www.army.mil/article/129597/1st ... nery_title.

The scammers abusing her stolen identity and pictures are located in Togo.

Type of messages sent to the victims:

Hi Dear,
My name is major, chrissy cook, From Orange, Connecticut, United States, I am US Army Special force at Ein al-Asad Us military base ,libya I pick interest on you. I will like to establish mutual friendship with you. I will introduce myself better and send you my pictures as soon as i receive your mail.(chrissycook20 @ g m a i l. c o m)
Regards,
major, chrissy cook,

or:

Hi,

I wish to seek for your assistance in a deal
that will be of mutual benefit for
the both of us from Camp Stanley,
Stationed in Uijeongbu, South Korea.
Please get back to me for more info.
Thank you for your time.

Sgt.Chrissy Cook

The email address chrissycook20@gmail.com is not the only one the fraudsters are using. There are also maj.chrissycook@gmail.com, chrissycook001@gmail.com and chrissycook2003@gmail.com.

Main stolen picture used in fraud:



After establishing the trust, the scammer pretend to send a parcel with a huge amount of money found during one of "her" missions against terrorists.

The parcel will be delivered with a courier company pretending to be Royalstar Global Services.

On the way to the destination, the parcel will be allegedly blocked and the victim will be asked to pay fees for receiving the parcel.

[firefly]

From the fake website:

Royalstar delivers goods and services to local communities, customers and international business partners. With access to an integrated global network of road, rail and sea and air transport resources, the company prides itself on delivering global service with local knowledge.
Through our network, Royalstar ensures that shippers can talk directly to our representatives, as well as using a variety of e-business solutions for digitalized cargo bookings. Responding to the needs of our customers, Royalstar is a major driving force behind the evolution of smart containers in our industry, helping to set the standards for digital shipping.
Royalstar Global calls at 500 ports on 200 trade routes, carrying some 21 million TEU (twenty-foot equivalent units) annually, via a modern fleet, equipped with the latest technologies.

Contact details:

Head office
1th Floor
Al Muhairy Center – office tower
Zayed The First Street
Abu Dhabi, UAE
USA OFFICE
Brockton Avenue, Abington MA 2351 United State of America
Pnone: +1(801)895-3093
Central African office
Banque Mondiale
Rue des Missions
Bangui, Central African Republic
info@royastarglobal.net

+18018953093
Number billable as mobile number
Country or destination United States
City or exchange location Salt Lake City, UT
Original network provider* New Cingular Wireless Pcs, Llc

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=146871.

From the domain name registration:

Domain Name: ROYALSTARGLOBAL.NET
Updated Date: 2020-03-11
Creation Date: 2020-01-10
Registrar Registration Expiration Date: 2021-01-10
Registrar: UpperLink Limited

Registry Registrant ID: Not Available From Registry
Registrant Name: Oliver Akpan
Registrant Organization: Sealion Marine Services
Registrant Street: Sarakawa way
Registrant City: Lome
Registrant State/Province: Lome
Registrant Postal Code: 228
Registrant Country: TG
Registrant Phone: +228.93964987
Registrant Email: operations.sealion@outlook.com

This is what the fake website looks like:

[Big Al]

My name is Chrissy Cook,

American soldier, currently serving in Iraq for ICU NURSE AT THE
COMBAT SUPPORT HOSPITAL AT CAMP SPEICHER in the United State Army and
providing adequate security for the US embassy in Baghdad.

I'm seeking for your kind assistance to move some money we discovered
in barrels at a farmhouse near one of Saddam's old palaces in
Tikrit-Iraq during a rescue operation, full details will follow if you
are interested and please do contact me via email.

Header:

Received: from 10.222.142.148
Return-Path: <med949205@gmail.com>
X-Originating-Ip: [209.85.218.65]
Reply-To: cchrissy293@gmail.com
From: From Chrissy <med949205@gmail.com>
Date: Fri, 7 Oct 2022 08:02:56 +0100
Message-ID: <CAF54qtc2J9wvCoFsmhxDcm3d7ivdfgyTwPvhnEo3emSLL4RTQg@mail.gmail.com>
Subject:

[Wayne]

Scammer's email address.: cchrissy293@gmail.com

Content of the email.: My Dear

Thank you for honoring my request, once again my name is Mrs Chrissy Cook (widow) currently serving in Iraq for ICU NURSE AT THE COMBAT SUPPORT HOSPITAL AT CAMP SPEICHER in the United State Army and providing adequate security for the US embassy in Baghdad . I'm seeking your kind assistance to have the funds transferred to your account where it will remain till after my discharge, my own share of the funds will be used for investment, the amount is US$14.5Million

I'm presently in a hospital recovering from injuries Sustained in a suicide bomb attack, that took place during our combat with some ISIS Militant, I have successful move the Fund out of Iraq to S.A, the fund is currently with a security Company there, and I have agreed with the security company that I will provide them the details of a relative who they will carry out the transfer of the funds to and I am willing to share the money with you.

I am sending you this email from the hospital where I am currently admitted for treatment. It was agreed by Sgt.Duff and I that some part of this money be shared among both of us before informing anybody about it since both of us saw the money first. This was quite an illegal thing to do, but I tell you what? No compensation can make up for the risk we have taken with our lives.

The above figure was given to me as my share, and to conceal this kind of money became a problem for me, so with the help of a British contact working with us and his office enjoys immunity, I was able to move the money to a security company in SOUTH AFRICA as a diplomatic baggage where it's currently being deposited. The security company wants me to provide them details of my relative/beneficiary who they will transfer the funds to. The reason I want you to claim the funds on my behalf is that as a soldier, I cannot present concrete evidence on how I made such a big amount of money and besides I don’t know when I will be discharged from here, at the end of everything, you will take 20% while the remaining remains in your account as my share for investment in your country after my discharged, attached are Identifications and this must remain confidential for my sake.

Regards
Chrissy Cook

[Big Al]

Trunk Box Scam:

My name is Chrissy Cook, American soldier, currently serving in Iraq for ICU NURSE AT THE COMBAT SUPPORT HOSPITAL AT CAMP SPEICHER in the United State Army and providing adequate security for the US embassy in Baghdad. I'm seeking for your kind assistance to move some money we discovered in barrels at a farmhouse near one of Saddam's old palaces in Tikrit-Iraq during a rescue operation, full details will follow if you are interested and please do contact me via email: chrissycook194@gmail.com for more details

Header:

Received: from 10.196.216.84
Return-Path: <asdfsgfdh@outlook.com>
X-Originating-Ip: [40.92.91.55]
From: Chrissy Cook <asdfsgfdh@outlook.com>
Subject: Good Day, Please I need Your Assistance
Thread-Topic: Good Day, Please I need Your Assistance
Thread-Index: AQHZJahur7WJ6ROS0k2ddxxUIBpb8a7HW1+UgE46D3k=
Date: Fri, 31 Mar 2023 23:47:03 +0000
Message-ID:
<VI1PR02MB40297A3C4FA42368B35EDCBCB28F9@VI1PR02MB4029.eurprd02.prod.outlook.com>

[Big Al]

Hello,
How are things going for you today? I hope this communication finds you in good health. Please let me know if this is the proper email address to contact you at. I would appreciate it if you could confirm whether this email address is the most convenient way to communicate with you. Additionally, please feel free to provide an alternative contact method if necessary.

Regards

Chrissy Cook

Header:

Received: from 10.197.39.76
Return-Path: <mrs.wendyjanewilliams@gmail.com>
X-Originating-Ip: [209.85.216.47]
Reply-To: chrissycook313@gmail.com
From: Chrissy Cook <mrs.wendyjanewilliams@gmail.com>
Date: Tue, 12 Dec 2023 22:00:48 +0200
Message-ID: <CAEH_WKxzq+NRbgWiLNEw3ST2Dg+Y91h7JwpY2A5Smh+n9YKBPw@mail.gmail.com>
Subject: re
To: undisclosed-recipients:;

[firefly]

Hello,
How are things going for you today? I hope this communication finds you in good health. Please let me know if this is the proper email address to contact you at. I would appreciate it if you could confirm whether this email address is the most convenient way to communicate with you. Additionally, please feel free to provide an alternative contact method if necessary.

Regards

Chrissy Cook

Header:

Return-Path: <mrmarkr605@gmail.com>
Reply-To: chrissycook94@gmail.com
From: Chrissy Cook <mrmarkr605@gmail.com>
Date: Wed, 31 Jan 2024 13:27:02 +0200
Message-ID: <CAJ5V-3j0VZqRAkL9gV7KuNxPkoUktnHDAz27q+16zE18Yzd6zA@mail.gmail.com>
Subject: re
To: undisclosed-recipients:;

[firefly]

My name is Chrissy Cook, American soldier, currently serving in Iraq for ICU NURSE AT THE COMBAT SUPPORT HOSPITAL AT CAMP SPEICHER in the United State Army and providing adequate security for the US embassy in Baghdad. I'm seeking for your kind assistance to move some money we discovered in barrels at a farmhouse near one of Saddam's old palaces in Tikrit-Iraq during a rescue operation, full details will follow if you are interested and please do contact me via email. For more details: cookchrissy839@gmail.com

Header:

Return-Path: <ptmails019@gmail.com>
Reply-To: cookchrissy839@gmail.com
From: From Guzman El Bueno <ptmails019@gmail.com>
Date: Thu, 28 Mar 2024 18:20:32 +0100
Message-ID: <CALjXZEjpq+Jk-vYGFPi52Vq6uf_9MyVzWveRge0J6tSDH7YQWg@mail.gmail.com>
Subject:
To: undisclosed-recipients:;

[Wayne]

Scammer's email address.: ptmails019@gmail.com

Content of the email.: HEAD OFFICE: UBA HOUSE
57 MARINA, LAGOS-NIGERIA.
Office Tel: + 234 9063946517
E-MAIL: info@uba-ng.org

Attention :

Our Ref: UBA/FGN/CP/2911/001/DP/01024

FINAL PAYMENT APPROVAL/REMITTANCE

We are obliged to inform you that we have received an Inward
Remittance Order from Federal Government of Nigeria and the Federal
Ministry of Finance instructing us to contact you and remit your
Contract / Inheritance Funds into your Bank Account.

However, handling this transfer without extreme and vivid carefulness
following the high rate and voluminous frauds going on here and there
under this dispensation, based on that we can not remit this funds
immediately without first contacting you to find out the following
security oriented information vis: Your Name, Your full Bank Details,
your Phone and Fax Number,

The Amount US$10.5 Million(Ten Million Five Hundred Thousand United
States Dollars)will be wire immediately into your account, The moment
this information is received, we will compare it with what we have in
our Central Computer Aki-Room/System here, if it comes with your
given information, we will immediately wire your Contract /
Inheritance Funds swiftly into your account.

Please you are advised to comply with these directives immediately as
to enable us include your File in our Payment Master List (PML) which
has been approved for Immediate / Final Remittance for this first
quarter of this year, 2024

Waiting for your urgent response on the above Phone, Fax Number

PLEASE CONTACT ME VIA THIS EMAIL ADDRESS : info@uba-ng.org

CALL ME URGENT ON THIS NUMBER + 234 9063946517

Regards and God bless you.

Mr. Phillips Oduoza
GROUP MANAGING DIRECTOR
UNITED BANK FOR AFRICA