Ksolace@pawluslifes.com

[Big Al]

Sir/Madam

This is to inform you that we have forwarded all relevant information to our Correspondence bank (Iqon Fin Bank), and they will contact you within a maximum of seven working days with account access information to enable you to access your account and equally make the transfer to any account of your choice.

Faithfully

--
Mr. Frank Silver
#200, 4245 97 Street NW Edmonton, Alberta
Canada T6E 5Y7
Telephone: +1 587 487 5314
remittance@santanderca.com

[Big Al]

Sir/Madam,

We just wanted to let you know that we got your coordinates from PAWLUS LIFE SERVICES INC necessary for activating a system account in your favour. However, the mandatory final verification and validation process has given the conformity of your details sent by PAWLUS LIFE SERVICES INC with further information in our system.

So, the statutory Account Activation Advice Certificate has been forwarded to the relevant department for immediate attention so you can activate a system account in your favour. After the account activation department confirms, you can submit this for your distribution through the Automated system.

All related Sensitive material, including the online access instruction, will only be sent to you after you've written confirmation.

You'll need to reconfirm the mobile phone number required to activate an account on your behalf.

So that you know, you must inform us if your email address is convenient for receiving your Account Information. It will enable us to forward it to you immediately to access your account online and transfer it to any account you choose.

I attached the Account Opening Form and fill it in with your relevant details to require activating a system account in your favour, together with proof of identification and address.

--
Faithfully
Mrs. Charlotte De Bruyne
(Head of International Remittance Department)

Header:

Delivered-To:
Received: by 2002:ac4:b9ca:0:b0:5f7:8493:8567 with SMTP id w10csp317655pih;
Thu, 23 Mar 2023 17:52:45 -0700 (PDT)
X-Google-Smtp-Source: AKy350aZkhV3cZhPS2ujZTBv7A0xnPJ/eeWnJuKsOerEYdxLXtwqg/eWppws2nLh1MErq1qXmD8T
X-Received: by 2002:ac2:5330:0:b0:4e0:ce21:b92 with SMTP id f16-20020ac25330000000b004e0ce210b92mr188011lfh.16.1679619162481;
Thu, 23 Mar 2023 17:52:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1679619162; cv=none;
d=google.com; s=arc-20160816;
b=VQByvoRZf43a6zbavg/+vD2j6TfeIq4MYDsT/PFltV60a5lFewoW2MpfMC3HnLW+rK
UFTatcJbxm+VpbxhTEPeZO/zameEp8fpZjv1q7pFFHbakEUaCAVVmopxe48KSiZhlzej
SEIt+W8HxDjykGIxrPwwWHrJCXHKykGpPBuVlkuCw5XSvIQFuar6X4xcRJ1Sr0RdEjCx
bXqiNilixSDmXJz11IuYOHmmc9/mnOeCjW4SMMTPTSgRELorBHEoHxobh9HoFHotNtAs
8HLlouMP63aXFhotpRbBcu1mTdqgheeoVUIJySluaQyUAr+7W5bjflJ15IrlxR7bxkva
s+lQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:user-agent:subject:to:from:date:mime-version
:dkim-signature;
bh=5iDh31Up39+ZKhczyF67b3jQPbBOy2lBAD/kt+6AyAY=;
b=wwJ1pyMOYV7STQOEe8H0lSCWZKl78ZJ6Q5b3bZovxXKiBYf3iYrBkUSQOFF8P2gn4F
zD5vv9O8w3Yk2iT8sbJzR80ZDPbQ6E5mtVEXZeg0V8+B7bpNIZ7KsIWVumoaH0dK4Ek3
HpaF2iUChE6vLzRUrgjcfHzhJLoSuBe+hDaz972sjzse8rQ16ZpaPVUkSEzevQs3Jp7h
ZydBp1fzpeHvhyNuBWv27oq3nEdvuNQ4Ra9IdXxdAwKwaem2RqD+1cuTITBWGK2npMXa
ppmfZ1rSInj+Yb1f53fJsQaaH+8nV6FyJ3z7PLQb8mY+3VcYCkh+DLhgcFMHqrt+gapF
B3pg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@iqonfin.com header.s=default header.b=HNdRHeii;
spf=pass (google.com: domain of info@iqonfin.com designates 51.89.87.113 as permitted sender) smtp.mailfrom=info@iqonfin.com
Return-Path: <info@iqonfin.com>
Received: from ip113.ip-51-89-87.eu (ip113.ip-51-89-87.eu. [51.89.87.113])
by mx.google.com with ESMTPS id i1-20020ac25221000000b004a1f16cdb39si8290941lfl.471.2023.03.23.17.52.41
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 23 Mar 2023 17:52:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@iqonfin.com designates 51.89.87.113 as permitted sender) client-ip=51.89.87.113;
Authentication-Results: mx.google.com;
dkim=pass header.i=@iqonfin.com header.s=default header.b=HNdRHeii;
spf=pass (google.com: domain of info@iqonfin.com designates 51.89.87.113 as permitted sender) smtp.mailfrom=info@iqonfin.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=iqonfin.com ; s=default; h=Content-Type:Message-ID:Subject:To:From:Date:MIME-Version: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=5iDh31Up39+ZKhczyF67b3jQPbBOy2lBAD/kt+6AyAY=; b=HNdRHeii8oZrHan8U+KWuackwN y6ZFooJHZv1wCv6LadbAEWp8Reespa+7l6Gvq+JkxOvfH7erhCbSHrpA9hQp6PzjPdek2w4EjdUdO GhuBSB0mu54GRaqJ/6oPckIDDBd7kjOqvccG314KGAWGfFv2SHBJuuBBnCvohLMesc4FXXKx3asMk sLqPNRXeb4xLkGs5NLx2/I6prKducEpSelTYu33zvy5CZKh+QAV3sjs/afCGbr/5WnUp91tDsSi5K LBu3j2CF05y7TGUO9yxwgfC+7jnn3xa3gh0+cPrkpfkt26+COSxV+TMXMT+NBDaCfrfiU3sNAwQE7 UqWO+KOw==;
Received: from [::1] (port=39932 helo=s82.gocheapweb.com) by s82.gocheapweb.com with esmtpa (Exim 4.96) (envelope-from <info@iqonfin.com>) id 1pfVff-00049Z-00; Fri, 24 Mar 2023 00:52:40 +0000
MIME-Version: 1.0
Date: Fri, 24 Mar 2023 00:52:40 +0000
From: Iqon Fin Canada - International Remittance Department <info@iqonfin.com>
To: info@iqonfin.com
Subject: Account Activation Advise
User-Agent: Roundcube Webmail/1.5.2
Message-ID: <b1d3d210806059bcc70ab2582e6f23ef@iqonfin.com>
X-Sender: info@iqonfin.com
Content-Type: multipart/mixed; boundary="=_02d5c963d77a924761eee05a10727d35"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s82.gocheapweb.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - iqonfin.com
X-Get-Message-Sender-Via: s82.gocheapweb.com: authenticated_id: info@iqonfin.com
X-Authenticated-Sender: s82.gocheapweb.com: info@iqonfin.com
X-Source:
X-Source-Args:
X-Source-Dir:

--=_02d5c963d77a924761eee05a10727d35
Content-Type: multipart/alternative; boundary="=_b89f2d002e7665bb31998328e681d6ba"

--=_b89f2d002e7665bb31998328e681d6ba
Content-Transfer-Encoding: 7bit

Orig IP: 51.89.87.113 | Orig ISP: Ovh Sas | City: n/a | Country: France

[firefly]

The fake bank used in scam claims to be Iqon Fin Bank.

From their fake website:

From inception, Iqon Fin Bank has committed itself to building better communities by improving the quality of life in the communities it serves. The Iqon Fin Bank Foundation grants millions of dollars to nonprofit organizations each year, and more than 60,000 adults and teens participate in free, financial education through the Iqon Fin Bank Financial Learning Center and the Iqon Fin Bank Financial Scholars Program.

Contact details:

66 Coldwater St, Orillia, ON L3V 1W5
Canada
Phone: +1705 5589868

+17055589868
Number billable as geographic number
Country or destination Canada
City or exchange location Orillia
Original network provider* Fibernetics Corporation

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=160680

From the domain name registration:

Domain Name: iqonfin.com
Updated Date: 2023-03-22
Creation Date: 2023-03-05
Registrar Registration Expiration Date: 2024-03-05
Registrar: NameSilo, LLC
Reseller: HostBlast.Net

Registry Registrant ID:
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: PrivacyGuardian.org llc

This is what the fake bank website looks like:

[Big Al]

Thanks for contacting me.
I am Kathrine Solace LLB (Hons) Vice President and CFO
SNR. Partner, Pawlus Life Services Inc.

Hello


Please update me on the status of this project so I can know our stand in this transaction. They are supposed to release these funds to us this month. Please tell me what is really going on. I don't understand. Please write to me. I'm waiting to hear from you.

Sincerely


Kathrine Solace LLB (Hons) Vice President and CFO
Head of Legal Department SNR. Partner
Pawlus Life Services Inc
Address: 2171 Douglas Ave,North Battleford SK S9A3N9
Canada.
Email: ksolace@pawluslife.com
Website: /www.pawluslife.com

2171 Douglas Ave,
North Battleford SK S9A3N9
Canada.

[Big Al]

Sir/Madam,

We just wanted to let you know that we got your coordinates from PAWLUS LIFE SERVICES INC necessary for activating a system account in your favour. However, the mandatory final verification and validation process has given the conformity of your details sent by PAWLUS LIFE SERVICES INC with further information in our system.

So that you know, you must inform us if your email address is convenient for receiving your Account Information. It will enable us to forward it to you immediately to access your account online and transfer it to any account you choose.

Faithfully,

Frank Silver

305 Broadway Winnipeg
Manitoba R3C 3J7
Canada
remittance@iqonfin.com

[Big Al]

This is to notify you that a credit of $ 9820000 has occur in your account
Iqon Fin Bank

[Big Al]

To:
Attention:

Sir,

With the successful establishment of your account, the entitlements due you were duly deposited into your Online Account for your immediate confirmation, as transactions enabling upon activating your account.

Find the attached Account Access instruction.
--
Faithfully
Mrs. Charlotte De Bruyne
(Head of International Remittance Department)
305 Broadway Winnipeg
Manitoba R3C 3J7
Canada
remittance@iqonfin.com

From the attached File:

iqonfin.com
TO:
Attention:
REFERENCE: XXXXX
ACCOUNT NUMBER: XXXXX
To whom it may concern,
Account Access instruction
With the successful establishment of your account, the entitlements due you were duly deposited
into your Online Suspense Account for your immediate confirmation, as transactions enabling, upon
activating your account.
To confirm your funds, follow this instruction as detailed hereunder and get back to me for further
instructions. Confirmation on the Internet; visit: https:/ /iqonfin.com/ , log onto the web page, click
on Log in, then feed in your Username & Password as outlined thus. You are advised to change your
password upon the first login.
Username: XXXXX
Password: XXXXXX
You are to adhere to these instructions for better utilization of Online Banking. The above
information should be kept in strict confidence.
Also, ensure that you Log out after accessing your account online.
Find here your account's other information:
Beneficiary name:
Bank account number: XXXXX
Bank address: 143 Wellington Street W Chatham ON N7M 1J5 Canada
Routing Number: 39952

Faithfully
Mrs. Charlotte De Bruyne
(Head of International Remittance Department)
143 Wellington Street W Chatham, ON N7M 1J5 Canada
+1705 5589868
info@iqonfin.com
/www.iqonfin.com

Header:

Return-Path: <remittance@iqonfin.com>
Received: from [127.0.0.1] (port=39438 helo=server305.web-hosting.com) by server305.web-hosting.com with esmtpa
Date: Fri, 21 Apr 2023 05:49:50 -0400
From: Iqon Fin Canada - International Remittance Department <remittance@iqonfin.com>
Subject: Account Access instruction
Message-ID: <8ea4c9e19fbbd4a8d97a460f5d34194a@iqonfin.com>

Orig IP: 162.0.215.194 | Orig ISP: Acp | City: n/a | Country: Canada

[Big Al]

Attention:

Sir,


Following your correspondence on the above-captioned subject matter, please be informed that upon notification instructions, we have verified your fund following standard practice procedure to ascertain and verify the genuineness of your claim. Our findings revealed that your fund is legitimate, valid and in order. Accordingly, the Bank has issued an irrevocable approval for releasing your fund pending the perfection/endorsement of vital classified Funds Release Documents.

Regarding our verification and confirmation from the Bank of Canada (Central Bank of Canada), be informed that based on this instruction, the following are necessary to ensure fund transfer to your account without any hitch or further delay.

1. Evidence of payment for Notarization of your Power of Attorney Service Charges of US$ 2,890.00

US$ 2,890 is for the Registration and Notarization of Power of Attorney and Fund Release Order at the Federal High Court and the Legal Verification Department of the Ministry of Justice.

2. US$ 1,786.00 is required for Stamp and Deed Duty per capital as stipulated in section (ii) of the foreign massive fund transfer Endorsement Act as amended in 2001 before the Commission can grant us approval to perfect your brief.

The fee is stated; thus,
1. Evidence of payment for Notarization of your Power of Attorney: US$2,890.00
2. Stamp and Deed Duty per capita: US$1,786.00
TOTAL: US$4,676.00

Being a mandatory Fee, ¨ Non-deductible, enabling the discharge of our Release obligations to you, the Beneficiary. Note that we can't make deductions; hence, you must remit the fee. The sum must be fully paid and credited to the account of the receiving agent to the Notary Public for the collection of Fees.

I have attached the account information of the receiving agent to the Notary Public.

Upon payment confirmation, your account will be activated to enable you to receive automated TAC via SMS to your mobile number:

Yours Faithfully.



--
Faithfully
Mrs. Charlotte De Bruyne
(Head of International Remittance Department)



305 Broadway Winnipeg
Manitoba R3C 3J7
Canada
remittance@iqonfin.com