remittancedept@bkforintlsettlement.com

[firefly]

Lottery scam.

EU. INTERNATIONAL EUROJACKPOT ON-LINE EMAIL LOTTERY WINNER NOTIFICATION:
Your Reference: No: SU/578629K/ES
Your Winner Batch: No: 101/17006/ES

EU. INTERNATIONAL EURO JACKPOT ONLINE LOTTERY; Winning Number: 5,12,15,21,39,3,4. Your Reference No: SU/578629K/ES and Your Winner Batch No: 101/17006/ES , Won Amount: €10.8m (Ten Million Eight Hundred Thousand Euros Only)in 3rd Grade.

A Total sum of 40 Million Euros was shared among the winners both in 1st, 2nd and 3rd Grade International EuroJackpot Online Lottery. You have 30 working days to claim this fund.

Furthermore, if you are the rightful owner of this email, step forward and claim your fund immediately before the Bank returns it as unclaimed fund to the state treasury.

For further details, please forward your details to the Official Lotto Paying Bank (Mr. John T. K. Stearne, Director, Foreign Remittance Dept of Bank For International Settlement (BIS), Email: info@bkforintlsettlement.com OR remittancedept@bkforintlsettlement.com .

We are in the EU. INTERNATIONAL EURO JACKPOT LOTTERY congratulates you today on your successful emergence.

Should you require more information, please feel free to contact us immediately.

Best Regards,

Dr. Stefan Hubmann
President, International Relations Department
EU. INTERNATIONAL EURO JACKPOT LOTTERY

Header:

Return-Path: <hrfueltecenergyoilgs@gmail.com>
From: "‏EU. INTERNATIONAL EURO JACKPOT LOTTERY" <euinternationaleurojackpotlott@gmail.com>
Date: Sun, 25 Jun 2023 12:52:21 +0100
Message-ID: <CAOxSXjzVXNNM2TtAQ55hGw4xEf449_0hg0euDN9nsFyW42oSVA@mail.gmail.com>
Subject: CONGRATULATIONS !!!
To: undisclosed-recipients:;

[firefly]

Reply received:

Ref: BIS/EU/3021/CTONU/23
Date: 26/06/2023

Att: xxx.

Dear Esteemed Customer,

Thanks for your email to us with all content well received.

The EU. INTERNATIONAL EURO JACKPOT ONLINE LOTTERY confirms that your
e-mail address has officially won an online E-Lottery with the sum of
Amount: €10.8 Million under Refer. No: SU/578629K/ES and Winner Batch
No: 101/17006/ES.

As the rightful owner of the deposited payment, you can step forward and
claim your fund immediately before the Bank returns it as unclaimed fund
to the state Govt. treasury.

We are paying almost Ten (10) beneficiaries from different countries who
has already confirmed their payment, so forward your details to enable
us pay you.

Expecting your cordial response to move forward.

Your Sincerely,

Mr. John T. K. Stearne
Executive Director, Foreign Remittance Dept
Bank For International Settlement (BIS)
E-mail: remittancedept@bkforintlsettlement.com
E-mail: info@bkforintlsettlement.com

*************************************
This is a genuine e-mail from Bank For International Settlements
(BIS-BANK). However, if you receive an e-mail which you are concerned
does not legitimately originate from us, please notify us immediately at
info@bkforintlsettlement.com,This email message is confidential and for
use by the addressee only. If the message is received by anyone other
than the addressee, please delete it from your computer.

Header:

Return-Path: <remittancedept@bkforintlsettlement.com>
Received: from 92.204.40.157 (EHLO ngvip1.afeeshost.com)
Date: Mon, 26 Jun 2023 09:31:37 +0100
From: "Bank for International Settlements (BIS Bank)"
<remittancedept@bkforintlsettlement.com>
Subject: Re: LOTTERY PAYMENT TRANSFER PROCEDURES
User-Agent: Roundcube Webmail/1.6.0
Message-ID: <dc88fc8f42024d4718b4baea553b6541@bkforintlsettlement.com>

Originating IP: 92.204.40.157
Originating ISP:
City: Erfurt
Country of Origin: Germany

Fake documents received with the message:

[firefly]

The fake site used in scam is a spoof of Bank For International Settlement (BIS).

The real BIS was founded in 1930.

The fake one was created in May.

The fraudulent domain name shows no content and is used only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=162057

From the domain name registration:

Domain Name: bkforintlsettlement.com
Updated Date: 2023-05-28
Creation Date:2023-05-28
Registrar Registration Expiration Date: 2024-05-28
Registrar: OwnRegistrar, Inc.
Reseller: Afeeshost Ltd
Domain Status: ok
Registry Registrant ID: OR_1396
Registrant Name: WhoisSecure

The reseller facilitating the registration of the fraudulent domain name, Afeeshost Ltd, is a Nigerian web hosting company.

[firefly]

Email received:

Reference: No: SU/578629K/ES
Winner Batch: No: 101/17006/ES

Attn: xxx

Sorry for late reply,

Due to the emergency of this jackpot winning fund transfer of Euro 10,8 Million we have routed the payment to our affiliated Bank in London , United Kingdom for an urgent release and transfer of the funds into your Bank account without delay , you are requested to forward below personal information / details to the Bank :-

FULL NAME:
DATE OF BIRTH:
NATIONALITY:
OCCUPATION:
ADDRESS:
TELEPHONE:
FAX NUMBER:

(BANK COORDINATE)
BANK NAME :
BANK ADDRESS:
ACCOUNT NUMBER:
SWIFT CODE:
IBAN CODE:
Also attach your Passport or National ID Card copy for Identification purpose.

You are advised to provide the above details and contact our payment center in London , United Kingdom through below contact details:

Bank: Equity Global Investment Bank
Contact person: Dr. Emad Elayan
Designation: Director of Finance
Email: info@eqglib.com
Phone numbers: +44 7916856942
Website: www. eqglib.com

Remember to update with us conversation between you and the Bank in London for proper advice , always send cc message to info@bkforintlsettlement.com,
info.bisremittancedept@gmail.com or euinternationaleurojackpotlott@gmail.com.

Always update us with your conversation with the Paying Bank for further advice.

Best regards,

Mr. John T. K. Stearne

Header:

Return-Path: <info.bisremittancedept@gmail.com>
From: "Bank For International Settlements (BIS)" <info.bisremittancedept@gmail.com>
Date: Thu, 13 Jul 2023 19:53:47 +0100
Message-ID: <CADkdzNoM6uh8NexMpBN7V=Qk3SwKA-u-NVD19NRhh9_o40cOYQ@mail.gmail.com>
Subject: URGENT LOTTO PAYMENT TRANSFER

+447916856942
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Hutchison 3G UK Ltd

[firefly]

The fake bank used in scam claims to be Equity Global Investment Bank.

The fake website shows the same contact details as the ones the scammer asked to send personal details to in the message posted above. The scammers asking for bank accounts and copies of the identity documents from victims have their own identity and contact details hidden under the privacy protection given by the Registrar.

Entry in the aa419 database of fraudlent websites: https://db.aa419.org/fakebanksview.php?key=162325

From the domain name registration:

Domain Name: eqglib.com
Updated Date: 2023-07-04
Creation Date: 2023-06-04
Registrar Registration Expiration Date: 2024-06-04
Registrar: NameSilo, LLC

Registry Registrant ID:
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: PrivacyGuardian.org llc

This is what the fake bank website looks like:

[firefly]

Recovery scam.

Attention: Bearer,

The International Financial Control Organizations, the World Bank,
International Monetary Fund (IMF) and the Bank of International
Settlement have notified this office through the Financial Action Task
Force (FATF) to immediately launch and investigation the allegation unto
the forfeiture of your US$10.8M Lottery payment to one Dr. Thomas
Longeway of the United States.

1). Is your e-mail hacked?
2). Are you really dead?
3). Did you really authorize the forfeiture of your US$10.8M Lottery to
him?
4). Without your response it will be assumed to be true.

The above-mentioned Financial Control Organizations will have no option
but to authorize the release of the payment to Dr. Thomas Longeway
within the time frame mandated to the office to conclude the
investigation.

We will need you to have us clarified within the next 2-3 working days
or we will assume the same with Dr. Thomas Longeway.

Faithfully,


Executive Director, Foreign Remittance Dept
Bank For International Settlement (BIS)

Header:

Return-Path: <remittancedept@bkforintlsettlement.com>
X-Originating-Ip: [92.204.40.157]
Received-SPF: pass (domain of bkforintlsettlement.com designates 92.204.40.157 as permitted sender)
Authentication-Results: atlas218.free.mail.bf1.yahoo.com;
dkim=pass header.i=@bkforintlsettlement.com header.s=default;
spf=pass smtp.mailfrom=bkforintlsettlement.com;
dmarc=unknown header.from=bkforintlsettlement.com;
Received: from 92.204.40.157 (EHLO ngvip1.afeeshost.com)
Date: Tue, 19 Mar 2024 11:15:44 +0100
From: "Bank for International Settlements (BIS Bank)"
<remittancedept@bkforintlsettlement.com>
Subject: AUTHORIZATION TO RE-DIRECT PAYMENT TO NEW BENEFICIARY
User-Agent: Roundcube Webmail/1.6.0
Message-ID: <bbb37ab9ab5747bde89d7380f7cdbc6f@bkforintlsettlement.com>

Originating IP: 92.204.40.157
City: Erfurt
Country of Origin: Germany