Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

admin@chamcompanyltd.com

Post up any 419 emails you received. All persons/companies depicted in these emails are either fictitious or have had their identities copied/stolen by the scammers.

admin@chamcompanyltd.com

Unread postby Big Al » Wed Mar 25, 2020 2:21 am

Corona mask Non-delivery scam:

Dear

Thanks for your email. See below the quotation for your order 100,000 N95 facemasks.

Product : N95 facemasks
Origin: Thailand
Delivery time : 5 days by air
Price per piece : $0.12 cent including transportation cost .

Total cost of your order 100,000pcs x $0.12 cent =$12,000usd

Payment Terms: 50% T/T against contract and invoice and 50% against original copy of all shipping documents

Please confirm the quotation above and send us your full delivery information so we can issue you Invoice.

1. Your company name :
2. Your company address:
3. Delivery address:
4. Telephone number :
5. Contact person

We wait your reply
Regards
Nhian


Header:

Delivered-To:
Received: by 2002:a05:6214:430:0:0:0:0 with SMTP id a16csp2665217qvy;
Sun, 22 Mar 2020 23:54:36 -0700 (PDT)
X-Google-Smtp-Source: ADFU+vt/8HA1xh1kqRzYS+m4At/IfGTSZJ+1i4Js6bI5zr90+hLsK0WSUWbJny9a+CEiZUc308dd
X-Received: by 2002:a17:90a:4809:: with SMTP id a9mr11177786pjh.73.1584946475982;
Sun, 22 Mar 2020 23:54:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1584946475; cv=none;
d=google.com; s=arc-20160816;
b=RGZiaDlkW1LODNIgQ7/F4aqQezL9eO3z1MVX17hmiMAp4zENZSMY7zW8eBgDPXebVV
5dE+Ti8Owi4LQHfbJHzewbPWnrT9o0BQJTVDpblMKmrEjGDyUY2fLittGWW3eVyRjWZI
fEbsR89ahwsbus22j47VRj2lganGxEA4gePlD6+nh35inGce+qAR5DK1U4dTvMp8VJyR
/k/qWCXR4MJbVW6X+P4QOWfoiUD9Z9LMqKeRZK7IyOu8Da6Ikfli4dEwJjqPq18A1WCK
emRTw31I1RA+lEKLs37+iNKdtLBGi4z/uzQan0K4BhSLT4E4KtaEW3dOioDeF6FU6M0X
nXAQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:references:in-reply-to:subject:to:from:date
:mime-version;
bh=pGa/hJTYmdtG8wVLOfGBZizMs0CnfXiyIoXwEiBNjQ0=;
b=nKzlS4fkGJHhPujZBgNc6sd7JyHXFLnHy0Y0k5ybhpi4YL+QBAmihU+sIZqtr8z41I
c4LjYh3CZsMkmUgypCUhonSaPiY94V9BKgPm7G1/ziiangOJ6AnzfqiLhUs8jLoyMOyO
QAm5xeDiB+euSuw2CV+kn5ooD0WXrOUMh2GUiyiawEFGYxybVKQl710He/7g51CsJ1qg
bL9ns+c4gfWNJje+e4EdGJA2ro4o+PKUfaZ0jMah1V6ifx+HjKh8qPWk3ov4ZUJemddB
LmSzBOF9uSfLS/UDFGXUGBVcrT7ICI+DwTGXSPq+Z85fOdJfDveK6nS0/2yFmbGbGrSx
TMqw==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of admin@chamcompanyltd.com designates 23.83.209.45 as permitted sender) smtp.mailfrom=admin@chamcompanyltd.com
Return-Path: <admin@chamcompanyltd.com>
Received: from crocodile.birch.relay.mailchannels.net (crocodile.birch.relay.mailchannels.net. [23.83.209.45])
by mx.google.com with ESMTPS id h10si10614466plr.304.2020.03.22.23.54.35
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 22 Mar 2020 23:54:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of admin@chamcompanyltd.com designates 23.83.209.45 as permitted sender) client-ip=23.83.209.45;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of admin@chamcompanyltd.com designates 23.83.209.45 as permitted sender) smtp.mailfrom=admin@chamcompanyltd.com
X-Sender-Id: st929rux59|x-authuser|admin@chamcompanyltd.com
Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id AF27A320200 for < >; Mon, 23 Mar 2020 06:54:34 +0000 (UTC)
Received: from s11.hosterpk.com (100-96-24-18.trex.outbound.svc.cluster.local [100.96.24.18]) (Authenticated sender: st929rux59) by relay.mailchannels.net (Postfix) with ESMTPA id D87BC32060E for < >; Mon, 23 Mar 2020 06:54:33 +0000 (UTC)
X-Sender-Id: st929rux59|x-authuser|admin@chamcompanyltd.com
Received: from s11.hosterpk.com (23-111-183-178.static.hvvc.us [23.111.183.178]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.18.5); Mon, 23 Mar 2020 06:54:34 +0000
X-MC-Relay: Neutral
X-MailChannels-SenderId: st929rux59|x-authuser|admin@chamcompanyltd.com
X-MailChannels-Auth-Id: st929rux59
X-Print-Coil: 3872645658d85802_1584946474546_2711660241
X-MC-Loop-Signature: 1584946474546:3195899148
X-MC-Ingress-Time: 1584946474546
Received: from localhost ([127.0.0.1]:44596 helo=s11.hosterpk.com) by s11.hosterpk.com with esmtpa (Exim 4.93) (envelope-from <admin@chamcompanyltd.com>) id 1jGGyl-000rge-9n for ; Mon, 23 Mar 2020 02:54:31 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=_169729be0b2af94da45e9633e021d186"
Date: Mon, 23 Mar 2020
From: admin@chamcompanyltd.com
To:
Subject: Re: N95 Masks
In-Reply-To: <CAF_jvR9fEcK-q=wKGYv-orREyJ0VM7kNX73DL_sYyC=oDqCqgA@mail.gmail.com>
References: <CAF_jvR9fEcK-q=wKGYv-orREyJ0VM7kNX73DL_sYyC=oDqCqgA@mail.gmail.com>
Message-ID: <88b9473d96998a69d0bd44bf46d9febe@chamcompanyltd.com>
X-Sender: admin@chamcompanyltd.com
User-Agent: Roundcube Webmail/1.3.8
X-AuthUser: admin@chamcompanyltd.com

--=_169729be0b2af94da45e9633e021d186
Content-Transfer-Encoding: 7bit


Orig IP: 23.111.183.178 | Orig ISP: Hvc-as | City: Cincinnati | Country: United States

Dear

Thanks for the details information for the invoice of your initial order 100,000pcs N95 face mask. Find attachment invoice for 100,000pcs, kindly revert back to us with copy of payment swift to proceed further with your delivery.

Regards
Nhian



Image

Info from the fake invoice:


NARINTORN LEOWCHAROEN
Address: 62/293 Mu 12 Thanon Thepprasit Ko Chang Thailand.
Company Reg, # 0205550022743
Tel: +66 849 983 022
WhatsApp: +66 849 983 022
Email: admin@chamcompanyltd.com
Website: chamcompanyltd.com

PROFORMA INVOICE

INVOICE NO CHCOLTDS3108/19
DATE OF INVOICE 24/03/2020
HS CODE 62171090
EXPORT REF: CHCOLTD/ TH/19
EXPIRING DATE 30/03/2020

EXPORTER / PRODUCER:
NARINTORN LEOWCHAROEN
COMPANY NAME: CHAMADA COMPANY LIMITED
COMPANY ADDRESS 62/293 MU 12 THANON THEPPRASITKO
CHANG KO CHANG TRAT
COMPANY REG# 0205550022743
CONTACT NUMBER: +66 849 983 022
EMAIL: ADMIN@CHAMCOMPANYLTD.COM
WEBSITE: CHAMCOMPANYLTD.COM
WHATSAPP: +66 849 983 022
SALES EXPORT MANAGER: NHIAN PRASON C.E.O MR. NATTAPONG CHANCHAI


BANK ACCOUNT DETAILS
BANK NAME: TMB BANK PUBLIC COMPANY LIMITED
BENEFICIARY NAME: N. L.
ACCOUNT NUNMBER: 624-2-39XXXX
SWIFT CODE: TMBKTHBK
ADDRESS: BANGKOK 10900 THAILAND
AMOUNT: $ 6000 DOLLARS




Phone:
+66849983022
Number billable as mobile number
Country or destination Thailand
City or exchange location
Original network provider* Advanced Info Service Public Company Ltd (AIS)
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" moderator.
 
Posts: 45718
Joined: Fri Apr 27, 2012 10:48 pm

Cham Company Limited - chamcompanyltd.com

Unread postby firefly » Wed Mar 25, 2020 7:35 am

The fake supplier pretends to be a company named Cham Company Limited, while using a fraudulent website active from the domain name chamcompanyltd.com.

From the fake website:

We have decades of experience supplying infectious disease-related products to healthcare facilities.


WE SHIP FROM THE USA, EUROPE AND ASIA! Our warehouses are strategically located in global trade centers. They optimize our global logistics by adding a dynamic layer to our supply chain.
Our warehouses enable us to cut both shipping costs and shipping times as well as deliver exceptional customer experiences


Contact details:

Address:
TratbKoh Chang - Thailand
Phone:
WHATSAPP: +66 849 983 022
E-mail:
admin@chamcompanyltd.com


+66849983022
Number billable as mobile number
Country or destination Thailand
Original network provider* Advanced Info Service Public Company Ltd (AIS)

Those decades of experience started on March 6. There is no TratbKoh in Chang, Thailand, only a Trat Koh in Chang, Thailand.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142862.

From the domain name registration:

Domain Name: chamcompanyltd.com
Updated Date: 2020-03-06
Creation Date: 2020-03-06
Registrar Registration Expiration Date: 2021-03-06
Registrar: WEBCC

Domain Status: ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Whoisprotection.cc


This is what the fake website looks like:

cham.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 50475
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

admin@chamcompanyltd.com

Unread postby Big Al » Wed Mar 25, 2020 9:33 pm

Dear

Thanks for the details information for the invoice of your initial order 100,000pcs N95 face mask. Find attachment invoice for 100,000pcs, kindly revert back to us with copy of payment swift to proceed further with your delivery.

Regards
Nhian


Same invoice:
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" moderator.
 
Posts: 45718
Joined: Fri Apr 27, 2012 10:48 pm

admin@chamcompanyltd.com

Unread postby Big Al » Thu Mar 26, 2020 11:17 pm

Daer

Find below another bank details for payment. Kindly revert back to us if any difficulties.

BANK ACCOUNT DETAILS
BANK NAME: TMB BANK PUBLIC COMPANY LIMITED
BENEFICIARY NAME: T. T.
ACCOUNT NUNMBER: ‎ 235 -2 - 54XXXX
SWIFT CODE: TMBKTHBK
ADDRESS: BANGKOK 10900 THAILAND
AMOUNT: $ 6000 DOLLARS
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" moderator.
 
Posts: 45718
Joined: Fri Apr 27, 2012 10:48 pm

admin@chamcoltd.com

Unread postby Big Al » Sun Mar 29, 2020 3:08 pm

Dear ,

Did you proceed with the payment with your bank. Please update us about payment to proceed with delivery.

Regards
Nhian.


Header:

Delivered-To:
Received: by 2002:a05:6214:430:0:0:0:0 with SMTP id a16csp1026001qvy;
Sat, 28 Mar 2020 23:38:39 -0700 (PDT)
X-Google-Smtp-Source: ADFU+vs1Zay1TueS7Mu+8EgRbmxIV6UiZ5FtZxqqM6iSGrb0a8H2QTTFYWvsZPlbE8jcrfFiOIf7
X-Received: by 2002:aa7:9dc1:: with SMTP id g1mr7518407pfq.308.1585463919389;
Sat, 28 Mar 2020 23:38:39 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1585463919; cv=none;
d=google.com; s=arc-20160816;
b=r5zG9JNTq3cIQ7NJAZ73a0H0IUYRedwPU7eIEXSDBZZu9pjI75jSzMHKvCCJidAFsK
0rzk0m71GKrN4Qma0GJL7cp6B5tv7XnhHrjej2fk7bhxkHp2RP+G2ysdjSrKzWSfDm6u
8Sqq6xvefmuTzF+zmx/zN2orkHtMXgj0y4ShCwgvkqpBPggek/uF75APhQCPx3B0n6XE
LDGuEFvg3FHm9uXi0uLO4NsZuPTjRZdszP75WYDouD4Z23CM+C6vsXLLcnIFfWJMyrvV
uCIQp1aJ6o1YRwknBuIAkKx50/5Rgadtw99bNWFD/PPy17poEcY+LOsmNCUSyOyAiV9O
M1Jg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:references:in-reply-to:subject:to:from:date
:content-transfer-encoding:mime-version;
bh=hFMqSUAZvxAtjnbFT7tl7gY3k8b49wM1eYekgAQpVU8=;
b=hUw+pRUIoa6oqPd+0vxMRCsdbHjb7vQt1yejk2SlZqKSwqDRmBSIsT4aVcSEQ5rlTe
kc3bUErBdekwh9N6ew3CRoImZfb20CJmWXhPOCbZs9eby5GPrFiGWCyacUmO2z0SCsDm
G0Jdbm4ClaiB8yLa7PyVgGOKY4eS7t9zrI16C1UGPsIFsjIj/Tph4KnCcOPlCyw0V97X
rjvwS/6VGDL05PiAxNTrvsLQXDw09ktd8OYucdSmvNxY0zXa2LUCSkVFOD9GLAMHH/Es
Ah0ht+y4nm2/ImToHmlAR5g7yQqB745AvyOLWpWhwfDTUDR6fQtRvKjRNlVzw24R4/2X
FMyQ==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of admin@chamcoltd.com designates 23.83.209.23 as permitted sender) smtp.mailfrom=admin@chamcoltd.com
Return-Path: <admin@chamcoltd.com>
Received: from brown.birch.relay.mailchannels.net (brown.birch.relay.mailchannels.net. [23.83.209.23])
by mx.google.com with ESMTPS id bc3si8194789plb.58.2020.03.28.23.38.38
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 28 Mar 2020 23:38:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of admin@chamcoltd.com designates 23.83.209.23 as permitted sender) client-ip=23.83.209.23;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of admin@chamcoltd.com designates 23.83.209.23 as permitted sender) smtp.mailfrom=admin@chamcoltd.com
X-Sender-Id: st929rux59|x-authuser|admin@chamcoltd.com
Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id E178B920D12 for < >; Sun, 29 Mar 2020 06:38:37 +0000 (UTC)
Received: from s11.hosterpk.com (100-96-1-39.trex.outbound.svc.cluster.local [100.96.1.39]) (Authenticated sender: st929rux59) by relay.mailchannels.net (Postfix) with ESMTPA id A6AE4920DF9 for < >; Sun, 29 Mar 2020 06:38:36 +0000 (UTC)
X-Sender-Id: st929rux59|x-authuser|admin@chamcoltd.com
Received: from s11.hosterpk.com (23-111-183-178.static.hvvc.us [23.111.183.178]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.18.6); Sun, 29 Mar 2020 06:38:37 +0000
X-MC-Relay: Neutral
X-MailChannels-SenderId: st929rux59|x-authuser|admin@chamcoltd.com
X-MailChannels-Auth-Id: st929rux59
X-Scare-Shade: 385e31d54b0a72fa_1585463917604_4283241527
X-MC-Loop-Signature: 1585463917604:417500100
X-MC-Ingress-Time: 1585463917604
Received: from localhost ([127.0.0.1]:51676 helo=s11.hosterpk.com) by s11.hosterpk.com with esmtpa (Exim 4.93) (envelope-from <admin@chamcoltd.com>) id 1jIRad-0001Jx-EH for ; Sun, 29 Mar 2020
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" moderator.
 
Posts: 45718
Joined: Fri Apr 27, 2012 10:48 pm

Cham Company Limited - chamcoltd.com

Unread postby firefly » Sun Mar 29, 2020 4:45 pm

The domain name chamcompanyltd.com became inactive on March 27. A day later, the fraudsters already have their new fake website in place, active from the domain name chamcoltd.com.

Same copy-pasted story:

WE SHIP FROM THE USA, EUROPE AND ASIA! Our warehouses are strategically located in global trade centers. They optimize our global logistics by adding a dynamic layer to our supply chain.
Our warehouses enable us to cut both shipping costs and shipping times as well as deliver exceptional customer experiences


Same location and phone number:

Address:
TratbKoh Chang - Thailand
Phone:
WHATSAPP: +66 849 983 022
E-mail:
admin@chamcoltd.com


Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142945.

From the domain name registration:

Domain Name: chamcoltd.com
Updated Date: 2020-03-28
Creation Date: 2020-03-28
Registrar Registration Expiration Date: 2021-03-28
Registrar: WEBCC

Domain Status: ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Whoisprotection.cc


This is what the fake website looks like:

cham.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 50475
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe


Return to Scammer 419 emails.

Who is online

Users browsing this forum: Google Adsense [Bot] and 18 guests