info@queenstowntcu.com

[Big Al]

Recovery Scam:

Attention: TO WHOM IT MAY CONCERN

Dear Sir,

I trust this message finds you well. My purpose in writing to you is to bring to your attention recent developments in the banking sector.

During the last quarter of 2023, a recapitalization exercise took place, and a substantial amount of foreign approved unpaid funds were discovered. In collaboration with the World Bank and the International Monetary Fund (IMF), a significant sum has been released as bailout funds to empower banks financially and settle foreign debts to the legitimate beneficiaries.

Our office has been tasked with verifying and overseeing the immediate release of all genuine approved sums to their respective rightful beneficiaries. As part of this process, we kindly request your prompt response along with any available identification that may facilitate the swift processing of your funds.

If you have any concerns or would like further clarification, feel free to contact us directly using the official contact information.

We appreciate your cooperation in this matter.

Sincerely,

Margareta Lasota
MD, QueensTown Trust Credit Union
Maryland, 26710 USA
Strictly reply to this email: info@queenstowntcu.com

Header:

Received: from 10.217.150.140
Return-Path: <margaretalasotaokd19@gmail.com>
X-Originating-Ip: [209.85.160.47]
From: Margareta Lasota <margaretalasotaokd19@gmail.com>
Date: Wed, 31 Jan 2024 03:18:46 -0800
Message-ID: <CABsZku7grpe2DMQsmaYK3rDCerhhae75uih0aNn4Qv8LMH=cpA@mail.gmail.com>
Subject: Attention: TO WHOM IT MAY CONCERN
To: Margareta Lasota <margaretalasotaokd19@gmail.com>

[Big Al]

Attention:

This is to acknowledge your quick response.

This is about a Fund Transaction that has been dormant for years in our bank (Queens Trust Town Credit Union, QTTCU) now as a result of bailout funds to empower banks financially and settle foreign debts to the legitimate beneficiaries For this reason I contacted you and some legal forms, and certificates to backup this claims will be needed which I will be sending to you, fill in appropriately and return back. The amount that tallies with your details is $13.5m (Thirteen Million Five Hundred Thousand United States Dollars).

Here's my direct phone number/whatsapp: +1 416 907 6254. Direct Call: +1 812 227 7432. Feel free to call or chat with me.

Yours Sincerely,

Margareta Lasota
MD, QueensTown Trust Credit Union
Maryland, 26710 USA

Header:

Delivered-To:
Received: by 2002:a02:cf34:0:b0:470:e6c2:b9ec with SMTP id s20csp430129jar;
Thu, 1 Feb 2024 08:33:08 -0800 (PST)
X-Google-Smtp-Source: AGHT+IH9qD8q3qkTx3NobRI8kfkyc3524igv0MRdXbN9iQRTH+jC6uDPCD8y5Cv5/SxWqPrTHj1M
X-Received: by 2002:a05:6402:4491:b0:55f:8c38:36a9 with SMTP id er17-20020a056402449100b0055f8c3836a9mr4864195edb.42.1706805187551;
Thu, 01 Feb 2024 08:33:07 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1706805187; cv=pass;
d=google.com; s=arc-20160816;
b=Fnv2QwDv43CWNiqa9WRhesy2IcWGYnaMpXkNCavgsZDUB4jZFmYFXTzqwoSa2R16kJ
6g9OuBrVPoGBSsrZvDj0QSE+u0Q9HxTNEnma9Yckg9j6FOQdP9GpS/bFLbLNgdka2A2M
0d/KRKN36V7CY7GwlRr7QwhrJXJ58kGx19XzxFP6VtXxG5eerGbSYKEXG0cLSlPuuP2s
Z62Z9ZlpgB4NgGCx4S9+sVM71Atm0ZC+bCMntk/8B4YrwuGrr2tKA/VgP6I4yL3BeuF9
7voH2RuR2xceo057Qyt4K4AYTtU3pe3ZlfjUlcokfVKfYohd+aPZG/rSYKRtxDMGRjKp
45bg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:importance:mime-version:subject:references:in-reply-to
:message-id:to:from:date:dkim-signature;
bh=lVGAtx3XezwN24Ymf/IqLOnD5wBfRjwUplEEQXUULiw=;
fh=GvbSIO4N40gdY0GsM7SgzOuyM4mvgxxFw51eAHmb9Ag=;
b=KJRBOy56K0Y8d0icCIhaFuyJDxEKMjM6Y892WchQ8PB9K8zN3+rL0pZAgCiIz/7P6k
/ZwUUzI4J2TXcuO8zmfOs8QmtIJxW8kpiiVfcJaHecX8M+h6XcvWtyAXMffHDYGd5Qyr
LxtsL+ZXEy+Hmv6vwQNhw/EH0tlJYDVHG9mqKLL6YF3r8tInNLGjBtoBQ3qU8L+YIAi1
2OAin+7dwaNnzEd5mJ3IIiVMRvp40PqSF/DidiBFqI1OUlP3dK0cMpsp9XWy1wroWVq2
ldaZ/L+ApEmrSUgP1XQeJE45WtQTUUaND1s3RxbYyNhhvv+M3hgue1j8n54MJMvAZicD
0N7g==;
dara=google.com
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@queenstowntcu.com header.s=zmail header.b=GV6VQBuB;
arc=pass (i=1 spf=pass spfdomain=queenstowntcu.com dkim=pass dkdomain=queenstowntcu.com dmarc=pass fromdomain=queenstowntcu.com>);
spf=pass (google.com: domain of info@queenstowntcu.com designates 136.143.169.50 as permitted sender) smtp.mailfrom=info@queenstowntcu.com
Return-Path: <info@queenstowntcu.com>
Received: from sender21-mail.zoho.eu (sender-of-o50.zoho.eu. [136.143.169.50])
by mx.google.com with ESMTPS id w20-20020a056402129400b0055fd0df0b50si244637edv.214.2024.02.01.08.33.06
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 01 Feb 2024 08:33:07 -0800 (PST)
Received-SPF: pass (google.com: domain of info@queenstowntcu.com designates 136.143.169.50 as permitted sender) client-ip=136.143.169.50;
Authentication-Results: mx.google.com;
dkim=pass header.i=@queenstowntcu.com header.s=zmail header.b=GV6VQBuB;
arc=pass (i=1 spf=pass spfdomain=queenstowntcu.com dkim=pass dkdomain=queenstowntcu.com dmarc=pass fromdomain=queenstowntcu.com>);
spf=pass (google.com: domain of info@queenstowntcu.com designates 136.143.169.50 as permitted sender) smtp.mailfrom=info@queenstowntcu.com
ARC-Seal: i=1; a=rsa-sha256; t=1706805183; cv=none; d=zohomail.eu; s=zohoarc; b=d4ETRuBtwSI7VPOtj/BjIXC3s9v8aIzdsXUox5GtcN2MYZEvPd7PB+C1Dcyz8A8BNw1WKIutAKjusdNrpMCGHpOaGf/nYMuyQLbErKNjotVzLP2mI7CX9R7F9HQ2hFCPy+Hg9HDro6C5SVY9vTEIAlx0pRzeiRmygrAj33yQlAc=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.eu; s=zohoarc; t=1706805183; h=Content-Type:Date:Date:From:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To:Cc; bh=lVGAtx3XezwN24Ymf/IqLOnD5wBfRjwUplEEQXUULiw=; b=ghT5O3rENEZYEmcohW7LjbamSsiltQNHrfb9MXf9qQN54m7z7ZtahBj6b19EKafI7wO2thc33EuidzPANd0YJCqDO7TpaP4kgdmEf0N7SUckXVeFbfWZt8Us67zfE2vVT9U0OgZA/t8knsjqNqVuBIAQ7NxEmg5vu6VEC5N7dQg=
ARC-Authentication-Results: i=1; mx.zohomail.eu; dkim=pass
header.i=queenstowntcu.com; spf=pass
smtp.mailfrom=info@queenstowntcu.com; dmarc=pass header.from=<info@queenstowntcu.com>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1706805183; s=zmail; d=queenstowntcu.com; i=info@queenstowntcu.com; h=Date:Date:From:From:To:To:Message-Id:Message-Id:In-Reply-To:References:Subject:Subject:MIME-Version:Content-Type:Reply-To:Cc; bh=lVGAtx3XezwN24Ymf/IqLOnD5wBfRjwUplEEQXUULiw=; b=GV6VQBuBB8i7M8R+9OGSbJg8LKbFJ+PAKp1htkgO6y/Ffnt3ipuSarLNfWmKamIq wThqPZzFQIrY60P9HP4lm/XzP+Dc8P8ee7HF4DWDPP9CRCXf3delFRhTGKM1tnn19wy V/GGu3BI6rviGv3tvJ/rYaQN5i2FnCbSAS/xYgFM=
Received: from mail.zoho.eu by mx.zoho.eu with SMTP id 170680517981762.672580835755184; Thu, 1 Feb 2024 17:32:59 +0100 (CET)
Date: Thu, 01 Feb 2024 17:32:59 +0100
From: Celia Guerra <info@queenstowntcu.com>
To:
Message-Id: <18d65843465.12132e19b47273.8421636083917640595@queenstowntcu.com>
In-Reply-To: <CAAbCh5v_SQti2n5w53mFxiNAa9-wxzLxuza16gbTHpgyUKG2VQ@mail.gmail.com>
References: <CAAbCh5v_SQti2n5w53mFxiNAa9-wxzLxuza16gbTHpgyUKG2VQ@mail.gmail.com>
Subject: Re: FW: Attention: TO WHOM IT MAY CONCERN
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_150018_2120712873.1706805179494"
Importance: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
X-Zoho-Virus-Status: 1
X-Zoho-AV-Stamp: zmail-av-1.1.0/206.784.99

------=_Part_150018_2120712873.1706805179494
Content-Type: multipart/alternative; boundary="----=_Part_150019_430403091.1706805179494"

------=_Part_150019_430403091.1706805179494
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Phone: +14169076254
Number billable as geographic number
Country or destination Canada
City or exchange location Toronto
Original network provider* Rogers Communications Canada Inc. (Wireless)

+18122277432
Number billable as mobile number
Country or destination United States
City or exchange location Bloomfield, IN
Original network provider* New Cingular Wireless Pcs, Llc - Il

[Big Al]

Attn:

Kindly read through the forms and write back with the details requested. Send a copy of your ID.

Thanks for your cooperation.

Sincerely,

Celia Guerra
MD, QueensTown Trust Credit Union
Maryland, 26710 USA
Strictly reply to this email: info@queenstowntcu.com

Celia Guerra

[Big Al]

Attn:

Send a copy of your ID.
I will fill in the forms and submit them on your behalf. Do you prefer bank to bank transfer or through Bitcoin?

Thanks for your cooperation.

Sincerely,

Celia Guerra
MD, QueensTown Trust Credit Union
Maryland, 26710 USA
Strictly reply to this email: info@queenstowntcu.com

[Big Al]

Attn:

We request for the following informations stated below
ID.
Occupation
Date of Birth
Country of Origin
Next of Kin
Bank Address

Find attached part of the filled forms which all have been forwarded to IRS Office for evaluation. Admin department of this bank will be contacting you upon the receipt of the requested informations and also update you on how your bank to bank transfer will commence.


Thanks for your cooperation.

Sincerely,

Celia Guerra
MD, QueensTown Trust Credit Union
Maryland, 26710 USA
Strictly reply to this email: info@queenstowntcu.com

[firefly]

The fake bank used in scam claims to be QueensTown Trust Credit Union.

The fraudulent domain name queenstowntcu.com shows no content and is used only for the email address.

The scammers asking victims for identity documents copies and personal details and bank accounts information have their identity hidden under the privacy protection given by the registrar.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=165620

From the domain name registration:

Domain name: queenstowntcu.com
Updated Date: 2023-10-06
Creation Date: 2023-10-06
Registrar Registration Expiration Date: 2024-10-06
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Domain Status: addPeriod
Registry Registrant ID:
Registrant Name: Redacted for Privacy
Registrant Organization: Privacy service

[Big Al]

WHAT IS GOING ON?

Celia Guerra

[Big Al]

Attn:

My apologies for the delays.
Available means of transferring your funds is via BITCOIN? This means is easier and swift. Our marketing department manager (Michelle Hey Smith) will be contacting promptly on how to credit your wallet if you are OK with the process.

Kindly get back to me.

Thanks for your cooperation.

Sincerely,

Celia Guerra
MD, QueensTown Trust Credit Union

[Big Al]

Attn:

My apologies for the delays, it is as a result backlogs of work. I promise to be consistent.

Bitcoin is swift, safe and reliable if you know it which you don't have to rather our digital department manager will diligently guide you until your funds hit your account.
Kindly chat her up on TELEGRAM with following details:

Name: Michelle Hey Smith
Telegram: +1 636 452 0419

Contact her today and request for the immediate transfer of your funds. Any further issues, kindly report back to me. Do not keep wasting times sir.

Thanks for your cooperation.

Sincerely,

Celia Guerra
MD, QueensTown Trust Credit Union

Phone: +16364520419
Number billable as geographic number
Country or destination United States
City or exchange location Ware, MO
Original network provider* Southwestern Bell

[Big Al]

Attn:

If you're using an iphone, go to your apple store, download TELEGRAM, register it with your number and send it to me. And if you're using android, go to your play store and do same. That's all.

Sincerely,

Celia Guerra
MD, QueensTown Trust Credit Union