rebeccasse12@gmail.com

[Big Al]

See split topic here:
viewtopic.php?f=6&t=96624&p=251877#p251877

Where the scammer has changed his script to take advantage of the war in Ukraine.

[Big Al]

We are sorry for this delay, this is to inform you that the bank management has decided to transfer your money through online banking since your money is huge . We will send you the login and password for you to access your account and access your money as well with our corresponding bank details in the United state of America.
Kindly respond to us for immediate transfer.
Thank you for your understanding.

Email address; support@peakfundfinance.com
Website;https:/ /www.peakfundfinance.com

SEND THE FOLLOWING INFORMATION

1.Home Address
2.Phone number
3.Date of birth
4.Next of kin
5.Zip poster code
6.Age

Mr. Jones

Header:

Return-Path: <transferrdeparttment@zohomail.com>
Received: from [156.0.214.4] by mail.zoho.com with HTTP;
Date: Mon, 05 Sep 2022 07:05:47 -0700
From: transferr departtment <transferrdeparttment@zohomail.com>
Message-Id: <1830df8b96e.cff7ff8c149574.2200570319435297220@zohomail.com>
Subject: URGENT REPLY NEEDED

Orig IP: 156.0.214.4 | Orig ISP: Etisalat Benin | City: Cotonou | Country: Benin

[Big Al]

We need this information from you

Govt ID/Driver's license
SSN

Header:

Delivered-To:
Received: by 2002:adf:fb0c:0:0:0:0:0 with SMTP id c12csp2966049wrr;
Wed, 7 Sep 2022 03:25:54 -0700 (PDT)
X-Google-Smtp-Source: AA6agR5AUwQ9BYetgY9teBJRE+C6nV5seSMja1nYy1cHc6lWwVYrjQLiCMsJtlqbkpROlSs7P4Lj
X-Received: by 2002:a0c:9c87:0:b0:479:606d:670e with SMTP id i7-20020a0c9c87000000b00479606d670emr2442084qvf.127.1662546354685;
Wed, 07 Sep 2022 03:25:54 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1662546354; cv=none;
d=google.com; s=arc-20160816;
b=edWM75Ifdo7c3tRvsKrLbtJyBukhzSbJqwa2Rp5ipmV2RBUlcwPb/ncUh59Dv88Nux
N6zH15FEVTPPJpHdVDZNnZKUNhTL1lpesWjZWl8/34GABzB9mPf4sCQo7RbPuS067xHJ
ZMVM43TfkVkkYnpqCa2t1AWK5oIKiV9Q7xFnunwNBd7jqoYkWI7mD7IsWGi9k/gizGtC
04HP1GZF1dJe6Yc173SurfZjZmU4VG8oH4BM5Ubdv4c4vY/9Nc1gTr52dN5y+FOBVJ4B
SL8gDNY8YJ+bDKBHVqjNxXSMhiJg29Rhd7MGtoYSHKCFNzP/qcidZwarYwZYzkADijN/
evpw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:date:content-transfer-encoding:references:message-id
:user-agent:to:subject:from:dkim-signature;
bh=hhSCBY4/mZlG5t0BRWg3kLLv06B3uVfJNkTuV6IREZ0=;
b=vR+z5cvgL+ccCO3+LReH51yStXGlbbpgWvYfM3+hdEud1iL5MvOVVsTN4QhuRIGDk+
Cilsr2ZkV2Z9yzY4nsxCutEa+clb1Ure5BBgWnn2A5OI1igIhlk5zDNRsIDEs+Z+YXDs
m7kOj0IKsXB7p+uZcxC5X6Cacr1ge3QItGmzOjeOsmx9nUI/bWCTtAULAS1569s/rwns
VA/qLgZFKA37XvULTmbaLTCv86NbmOzYpVdG0WhAeaXlK/LPCCfsnck1xODqH29oTBu9
OA00cBeTtaYbvjjBES5qG5GHiP/HAzFYRyLBRi7DL9C0yhR7o5VXpCWiW52cCBCU2OKD
HcFw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@peakfundfinance.com header.s=dkim header.b=kCFl0cgJ;
spf=pass (google.com: domain of support@peakfundfinance.com designates 104.223.93.83 as permitted sender) smtp.mailfrom=support@peakfundfinance.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=peakfundfinance.com
Return-Path: <support@peakfundfinance.com>
Received: from vps204.techplushost.com ([104.223.93.83])
by mx.google.com with ESMTPS id b130-20020ae9eb88000000b006b57606b10dsi7702933qkg.226.2022.09.07.03.25.54
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Wed, 07 Sep 2022 03:25:54 -0700 (PDT)
Received-SPF: pass (google.com: domain of support@peakfundfinance.com designates 104.223.93.83 as permitted sender) client-ip=104.223.93.83;
Authentication-Results: mx.google.com;
dkim=pass header.i=@peakfundfinance.com header.s=dkim header.b=kCFl0cgJ;
spf=pass (google.com: domain of support@peakfundfinance.com designates 104.223.93.83 as permitted sender) smtp.mailfrom=support@peakfundfinance.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=peakfundfinance.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=peakfundfinance.com; s=dkim; h=MIME-Version:Date:Content-Transfer-Encoding: References:Message-Id:To:Subject:From:Content-Type:Sender:Reply-To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=hhSCBY4/mZlG5t0BRWg3kLLv06B3uVfJNkTuV6IREZ0=; b=kCFl0cgJ2Rgc+pinjdz5rj8Z36 9zXWkBVnXws7shws76VWajZt3nwhsZqeoTzB6r2NG13b4TMza2/YDlP9JxGmUr4XzvVG4d8mhec8B Ptd95psfHY0jmj6iudDTkggjUWjw84Ewv2fU0v5lTzNMURTRn3ZvDunAjAA9hDZ1mk2Q=;
Received: from [156.0.214.21] (helo=localhost) by vps204.techplushost.com with esmtpa (Exim 4.94.2) (envelope-from <support@peakfundfinance.com>) id 1oVsFo-0003dH-F6 for ; Wed, 07 Sep 2022 06:25:57 -0400
Content-Type: multipart/alternative; boundary="----sinikael-?=_1-16625463499780.8122825008502079"
From: support <support@peakfundfinance.com>
Subject: Re: Fwd: URGENT REPLY NEEDED
X-Type: reply
To:
User-Agent: Desktop
Message-Id: <3fb25c9dbeb51.b62f917940107@peakfundfinance.com>
References: <CALq0=auDh3R6Qhw0NX6tbTusgavGUoJFQMJSnREoZeYFPhw7Qw@mail.gmail.com> <CAF_jvR9bUVb3KBBOzzX8dRW+hNcANJ5dWUBY9+gEsYh5WXu1_w@mail.gmail.com> <CALq0=avkhg8dF05qVq09oq-PjFxS3zC_6DWndOz1_Se7tNFzcw@mail.gmail.com> <CAF_jvR_POsZ98H=iaw2jFn4MazKKFS=kGKtjBdHM+Mp=jy99zA@mail.gmail.com> <CALq0=avPH0KJHeiyNC+eXQpkn9j+eNYX3Y+osXbc3=TM4QXnxw@mail.gmail.com> <CAF_jvR9GPAbM2A30XX1aicZY2+EZf3d-a-7fJqJjfAH1obL9SA@mail.gmail.com> <CALq0=atCrCOvDizc_yP7btq+A79VGqfXL2ALAjR4icDkO+QNAg@mail.gmail.com> <CAF_jvR9Ma_41R2Og2uN7X3b_O3HcdQW-9BhR5jgAZa6X=E4+aA@mail.gmail.com> <1830df8b96e.cff7ff8c149574.2200570319435297220@zohomail.com> <CAF_jvR_eEtMUaSey8VgRjvoVOcBAqSCaMBo3m7vgT8iBwjYKVA@mail.gmail.com>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 07 Sep 2022 10:25:48 +0000
MIME-Version: 1.0

------sinikael-?=_1-16625463499780.8122825008502079
Content-Type: text/plain; format=flowed
Content-Transfer-Encoding: 7bit

Orig IP: 156.0.214.21 | Orig ISP: Etisalat Benin | City: Cotonou | Country: Benin

[firefly]

The fake site used in scam claims to be a financial institution named Peakfund Finance.

From the fake website:

Peakfund finance is a member of Peakfund Financial Technology Limited, a company duly registered. Our investment professionals invest savers funds in financial instruments and manage the investments to ensure optimum return.
To ensure security of savers funds, assets are jointly held by Charles Schwab, a company authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. These assets are marked to market periodically to ensure savers are protected.

Contact details:

603 Rossmoor CT, Champaign Chicago 61822
6369408
support@peakfundfinance.com

The phone number is invalid.

The alleged US bank claims to be registered, regulated and authorized in the UK.

The scammers ask their victims to provide personal identifiable information, but they hide their personal identity while registering the fake site.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=158108

From the domain name registration:

Domain Name: PEAKFUNDFINANCE.COM
Updated Date: 2022-04-19
Creation Date: 2022-04-19
Registrar Registration Expiration Date: 2023-04-19
Registrar: TLD Registrar Solutions Ltd.

Reseller:
Registry Registrant ID: Not disclosed
Registrant Name: Domain Admin
Registrant Organization: Whois Privacy Corp.

This is what the fake website looks like:

[Big Al]

Same phone number:

Attention:

In a matter of few minutes, confirm to us the authenticity or
otherwise of the claim that the owner of the above email Address is
dead of Cardiac attack necessitating the transfer of his Fifteen
Million,Seven hundred and fifty thousand U.S Dollars ($15,750,000.00)
payment this morning as a "Gift Inheritance" to Thompson Hollace of
United States as backed up with a duly executed Deed of assignment in
his favor. But if the death claim is false, quickly send a rebuttal to
us via( psecialfraudunitfcidng@gmail.com ) with a reconfirmation of
your details as follows: (1)Name, (2) Address, and (3) Telephone
numbers. As soon as you have sent that to us by email, then give me a
brief call to confirm receipt of the mail or otherwise.

Yours Faithfully,
Dan Adebiyi.
For: Garba Umar.
Special Fraud Units (SFU),
13, Milverton Road, Ikoyi, Lagos, Nigeria
Direct Phone: +234 817 793 1659

Header:

Received: from 10.222.142.149
Return-Path: < danprof2014@gmail.com >
X-Originating-Ip: [209.85.216.54]
Reply-To: psecialfraudunitfcidng@gmail.com
From: Dan Adebiyi <danprof2014@gmail.com>
Date: Wed, 28 Sep 2022 17:49:52 -0700
Message-ID: <CAP78OP9K9g3hR2tdqRjMWG292-HZv4UGDGSmQXs1d=BQGyy9ZA@mail.gmail.com>
Subject: Hello Beloved,

[Big Al]

Due to the ongoing rehabilitation process, the UBA bank discovered the sum of ( Twenty Million And Seven Hundred Thousand United States Dollars) belonging to you. However you hereby advised to contact the Remittance Director Customer Service Ms. Ebih Memuna, with your full account details via email: customer_care1@qualityservice.com for immediate remittance of funds to your designated bank account.

Regards.
Mr. Mark Peters.

Header:

Return-Path: <adiyowamoses@gmail.com>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])
Reply-To: customer_care1@qualityservice.com
From: Mark Peters <adiyowamoses@gmail.com>
Date: Mon, 24 Oct 2022 16:46:14 +0100
Message-ID: <CA+QXF5URUbbv+CJZi0z62TpxOG_Uz_-zorx2pD99-X_rBbzp9g@mail.gmail.com>
Subject: Regards

[Big Al]

In order to facilitate your payment of ( Twenty Million And Seven Hundred Thousand United States Dollars), you are required to furnish us with the following details: ensure that we are dealing with the rightful beneficiary:

Your Full Name:
Your direct Cell/Whatsapp Number:
Your Passport id:
Your Bank name:
Your Account number:
Your Routing number:
Your Bank address:
Your Holders address:
SYour swift code:

You are required to provide the above information for immediate bank transfer and for corroboration purposes. This notification email should be confidential as your urgent response is anticipated.

Regards
Ms. Ebih Memuna
Remittance Director
Customer Service(UBA)

[Big Al]

I acknowledged the respect of your bank details. This is to inform you that your banking coordinates have been sent to United Bank of Africa for immediate action of your USD$20,700,000.00 release. Attach is your transfer slip.

From the attached doc file:

Dear :

United  Bank of Africa electronic Notification Service (UBA)
We wish to inform you the transaction occurred on your account with us.
 
The details of this transaction are shown below:
Transaction Notification
Account
Number :
Transaction
Location : 50,ISHERI RD,OJODU LAGOS
Description : TELCO CHARGE
Amount :

$ 2,700,000

Value Date : 26-10-2022 10:52 :AM
Remarks : 26102022 UBABank Enquiry Telco Charge for 2,70.27.008/10.75/
Time of
Transaction : 26-10-2022 11:08
Document
Number : 0

[Big Al]

Dear:

I acknowledge the respect of your email and content is well noted. Note,I am not silent in this transaction,the only thing holding this transaction is $270.00. The transfer is on hold because of the transfer fee and back up documents.

Attached is the legal document to back up the transfer to your account with a sum of $270.00 dollars. Let us discuss on how to send out the fee for the release of the fund to your account,


Regards
Ms. Ebih Memuna
Remittance Director
Customer Service(UBA)

[Big Al]

Reminder to you once again. This is your deposit slip from my bank. Attached is your deposit slip here in my bank.

Though I'm busy, I am more committed in making this your money get to your account this week.

Finally I advised you to do what is necessary by abiding by laws and order and follow the due process. You are advised to follow the rules
and regulations of the bank for easy release of your fund to you.

Mrs.Sharon L. Hodgson
Head of Customer Fund Transfer Dept

Very urgent important reminder to you. Note,I am not silent in this transaction,the only thing holding this transaction is $1,250 One thousand two hundred and fifty dollars. and I have already detailed everything in my first mail to
you.

This is to remind you that I am still looking forward to hear from you regarding your payment of $5.7Million dollars,because there is no way you can receive this fund without you going through the payment procedure to receive your USD$5,700,000.00 without any delay.I know by now you have saved the $1,250 dollars.

Finally,I would like us to conclude this arrangement quickly so that the transfer will leave as soon as possible to arrive in your account any moment. Or as your Representative here can you sincere tell me how much you have raised out of the $1,2250 dollars,let me know how to assist you complete the balance.

I HAVE CONFIRMED THE $5,700M USD IS
REALLY DEPOSITED IN A BANK OF AFRICA ACCOUNT AND YOU ARE THE RIGHTFUL BENEFICIARY TO THESE FUNDS WITH BANK OF AFRICA ACCOUNT ON YOUR NAME

Thanks For your anticipated co-operation and understanding We will serve You better.


Mrs.Sharon L. Hodgson
Head of Customer Fund Transfer Dept