southa643@gmail.com

[Wayne]

In good faith and with concrete assurance we wish you the best
People

SARB KTT <southa643@gmail.com>
Today at 7:12


Message body
HON Beneficiary


Your email well noted and clear to this effect we have verified and confirmed process of your payment and found out that your funds has been stock due to wrong interception and incomplete documents.




We need to put you up to date and get the approved documents which are non criminal conduct certificate, IMF authorization payment release, anti terrorist certificate,UN payment approval and funds release order, as soon as this documents are approved accordingly your funds will hit your nominated means instantly.



As agreed you will have to register with us with the sum of $260 so your name will be approve with fund assistant clarification department, it will enable them finance your transaction and make sure your funds hit your bank account. All required documents and clarification will be send to you by the department as soon as your names registered and approved to enable you pay for the documents so your funds can be in your position.



The information on how to send the $260 for registration will be send to your phone number via SMS for security reasons and make sure you reconfirm all details as required.


We will also send you the IMF/UN form and registration form to fill and resend to us as soon as the department confirm the payment of $260.


To conclude your payment fill the form and send them back to us, a bank certified draft will be issued from South Africa Reserve Bank covering your approved amount and it will be open for clearance with your bank in 24 hours as soon as you deposit it with your bank. The draft and the documents will be send to you via South Africa Reserve post Courier services and the tracking number will be release to you to deliver in 72 hours. Avoid delay and proceed accordingly or you call us for more clarification


In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27622190687
Email cbnusman.17@yahoo.com
Email account_ktt@accountant.com

Phone:
+27622190687
Number billable as mobile number
Country or destination South Africa
City or exchange location
Original network provider* CELL C

[Big Al]

The Reserve Bank of South Africa can also credit your funds into an ATM card and send it to you so you can proceed withdrawal from it. All what you need to do is follow the process, fill the forms and indicate you need ATM card through your email, you can also request that the fee required will be paid once the ATM card arrive your country, I will assist you to approve it.

In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687

[Big Al]

Please reconfirm all information needed via Email so we can proceed accordingly. All details required reconfirm it now.

In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687

[Big Al]

Welcome to Sarp Courier Services
Hi


Sir Dr Usman Kadiri, has sent you a package to your address with the following data:



SHIPMENT SHIPPED TO YOUR DESTINATION

Shipment status:

# Tracking No: AWB-100XXXX
Status: In Transit
Email:
Address:
Date of shipment: 04/28/2019

Shipping Details: ATM CARD

Header:

Delivered-To:
Received: by 2002:a50:9118:0:0:0:0:0 with SMTP id e24csp1675960eda;
Thu, 25 Apr 2019 01:39:00 -0700 (PDT)
X-Google-Smtp-Source: APXvYqz6j5d+Bb/RwFbOnB8skYHMtgqneFLZ+vGf/4GSq4a9ApZOp4ReLHiAziCsPETkTxM3ffHE
X-Received: by 2002:a0d:dd84:: with SMTP id g126mr10167694ywe.443.1556181539975;
Thu, 25 Apr 2019 01:38:59 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1556181539; cv=none;
d=google.com; s=arc-20160816;
b=YtbaP9zRipk77pfL0bfG7gdojxBSDguqTX4KqKDwPInOO7x/RU9/b6iY+z4aX1ufn2
nsMWYj5KjgS1EPb0SY3xqqqFIAaUdOYkDvyagTJjHWWAa0Z+Z0pbX4dwAcsbCfAI1Jda
KY65c6/NNpB/hkVG8wBjJcHk0mQT1AsJn5V228wQ+0p4aLdZRsDGNqwfLd1DWxtuouHE
tktsvbUnu118buGePQvijN9ntuTOopVP4zln7khOPytuZ8V1cWNLf4K0HnRnHxadS7Ge
hRsfk99xc5Mb+MOXO11oVRxZROVbxMkeLT9BsPRUxXAefQGrq/TJ4/Mh898uJiN/0DAG
DhfA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=date:message-id:from:mime-version:subject:to;
bh=Q0u4zg6Jl8pBRpEwIRguwDTTnbbe8FO0kGnLbPvvF6E=;
b=JI5zuH2/T3Dr8rmdbbNkq/LM5XqZ5t2uc/19FG+f/9UL0dE04TIDdlOycvWKFKZU6i
zOpvhe4vPRZzIyw299tlznd1KWPWnG2dLXJ3BlQd+2rzeIhgFwhZ+ILA6Fjb8BwvqwF8
sq8dwg6VniNkXKVEBr237fCblIeDRRHzMEXK0Lo4ire7Tn6v+xh3Co6WbKkOqsrLdvqS
eYoRxWJgbvc9eCW3ZH8t1XTeK/DxkCoWoMzK8mgHSdRcSLRhqkNfYIO3jbmahXAz7zMG
W8Pc1+KC4mbCbaa3RSXzpZQbnjnJvy1xUEkqR1bsoJ23By1b3ocTcHMPDiMSYNAt0OX4
sIxg==
ARC-Authentication-Results: i=1; mx.google.com;
spf=neutral (google.com: 45.35.251.218 is neither permitted nor denied by best guess record for domain of sarpcourie@server1) smtp.mailfrom=sarpcourie@server1
Return-Path: <sarpcourie@server1>
Received: from server1.dollarhosting.top (dollarhosting.top. [45.35.251.218])
by mx.google.com with ESMTP id 76si2627612ybn.300.2019.04.25.01.38.59
for < >;
Thu, 25 Apr 2019 01:38:59 -0700 (PDT)
Received-SPF: neutral (google.com: 45.35.251.218 is neither permitted nor denied by best guess record for domain of sarpcourie@server1) client-ip=45.35.251.218;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 45.35.251.218 is neither permitted nor denied by best guess record for domain of sarpcourie@server1) smtp.mailfrom=sarpcourie@server1
Received: by server1.dollarhosting.top (Postfix, from userid 1194) id 966E7BEFF0; Thu, 25 Apr 2019
To:
Subject: SHIPMENT SHIPPED TO YOUR DESTINATION | Sarp Courier Services
X-PHP-Originating-Script: 1194:agregar.php
MIME-Version: 1.0
Content-type: text/html; charset=utf-8
From: info@sarpcourierservices.com
Message-Id: <20190425083857.966E7BEFF0@server1.dollarhosting.top>
Date: Thu, 25 Apr 2019 04:38:57 -0400 (EDT)

The Reserve Bank of South Africa have approved your funds on ATM card, I have sent it to you via SARP courier services ww w.sarpcourierservices.com Email - info@sarpcourierservices.com - Tracking no-AWB-100XXXX

Contact the Korean service and get back to us.

In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687

[Big Al]

No body of the E-mail. Only this in the subject line:

The Reserve Bank of South Africa have approved your funds on ATM card, I have sent it to you via SARP courier services ww w.sarpcourierservices.com Email - info@sarpcourierservices.com - Tracking no-AWB-100XXXX Contact the Korean service and get back

Header:

Return-Path: <account_ktt@accountant.com>
Received: from [197.255.167.99] ([197.255.167.99]) by web-mail.mail.com (3c-app-mailcom-lxa06.server.lan [10.76.45.7]) (via HTTP);
Thu, 25 Apr 2019
From: Account Sarb <account_ktt@accountant.com>
To:
Subject: The Reserve Bank of South Africa have approved your funds on ATM card, I have sent it to you via SARP courier services ww w.sarpcourierservices.com Email - info@sarpcourierservices.com - Tracking no-AWB-100XXXX

Orig IP: 197.255.167.99 | Orig ISP: Spectranet | City: Lagos | Country: Nigeria

[firefly]

The scammers use a fraudulent domain name pretending to be Sarp Courier Services.

From the fake website:

Sarp Courier Services is a dynamic international freight and logistics company committed to being a part of every client’s success story.

Due to our extensive nation- and worldwide presence and experience we are able to provide a solution for all of your logistics requirements.

Our vast network of highly qualified and experienced team members ensures prompt and efficient global logistics services enabling you to focus on your core business.

Contact details:

370 Helen Joseph Street,
0002,
Pretoria,
South Africa
Phone: 073 905 2807
Email:info@sarpcourierservices.com

+27739052807
Number billable as mobile number
Country or destination South Africa
Original network provider* MTN

The location is stolen from the South African Reserve Bank.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137487.

From the fake site details:

Domain Name: sarpcourierservices.com
Updated Date: 2019-04-26
Creation Date: 2018-12-19
Registrar Registration Expiration Date: 2019-12-19
Registrar: NameSilo, LLC

Registry Registrant ID:
Registrant Name: Domain Administrator
Registrant Organization: See PrivacyGuardian.org

This is what the fake site looks like:

[Big Al]

The Reserve Bank of South Africa have approved your funds on ATM card, you are required to pay the $260 via western union to Dashaun Pettway Address New york USA Immediately so your ATM card can be delivered successful and also send me the prove of the western union payment for clearance.


In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687

[Big Al]

you are instructed to pay the required amount to this
account Name Mervyn b.
Bank TDBANK USA NY
Accunt number 433-922XXXX
Routing number 026013673

In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687

[Big Al]

you are instructed to pay the required amount to this account Name Mervyn b. Bank TDBANK USA NY Accunt number 433-922XXXX Routing number 026013673

In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687

[Big Al]

The Reserve Bank of South Africa have approved your funds on ATM card, you are required to pay the $260 In good faith and with concrete assurance we wish you the best. Your's sincerely Sir Dr Usman Kadiri Stock funds payment committee South

The Reserve Bank of South Africa have approved your funds on ATM card, you are required to pay the $260


In good faith and with concrete assurance we wish you the best.

Your's sincerely
Sir Dr Usman Kadiri
Stock funds payment
committee South Africa
Tell +27 62 219 0687