info@revlogistic.com

[firefly]

Posted on behalf of the victim.

we bought a supply of 210,000 masks for hospital use and paid € 32,000
in advance to FIRST CHOICE
71-75 SHELTON STREET,
COVENT GARDEN LONDON,
WC2H 9JQ ENGLAND
Phone: +44 203 995 5689
This company claims to have shipped the goods using REVOLUT LOGISTIC
Somerset House, 37 Temple Street,
Birmingham, B2 5DP,
UK
Tel.: +44 121 318 8959

Email: info@revlogistic.com
Website: http: // revlogistic.com

The goods were supposed to arrive in Italy on March 19,
2020, but they did not arrive. On Saturday March 21st they told us
that the truck was stopped in Emmetten because the driver felt sick.
Today they told us that the truck was vandalized and the goods stolen.
Can you please check whether FIRST CHOICE and REVOLUT LOGISTIC really
exist or is it a fraud? We cannot move from Italy and we don't know
how to verify.

Both the supplier and the delivery company are fake. The fraud is operated by scammers originating from the Cameroon.

[firefly]

The fake courier used in fraud claims to be Revolut Logistics and uses a fraudulent website active from the domain name revlogistic.com.

From the fake website:

With over years of experience, Revolut Logistics has set its own platform in developing Total Logistics Service like Freight Forwarding; Customs Broking; Consolidation; Multimodal Transport Operations, Cross Country Trade, Break bulk/Project cargo, Hazardous cargo and has carved a niche for itself as major market leader.We realizes that clients have specific requirements with regards to their shipments therefore we spend considerable time to consult clients individually helping us understand their specific requirements and fit our services as per customer's special needs. Revolut Logistics has the resources & the expertise to help you compete more effectively. An opportunity to serve you would definitely be the beginning of a mutually beneficial relationship.

Contact details:

ADDRESS

Rattana sakha5 chiang mai-Hang dong Rd,
Tambon Pa Daet, Amphoe Mueang Chiang Mai,
Chang wat chiang Mai 50100,
Thailand
Branch Office
Somerset House, 37 Temple Street,
Birmingham, B2 5DP,
United Kingdom
Phone : +44 121 318 8959
Email : iinfo@revlogistic.com

+441213188959
Number billable as geographic number
Country or destination United Kingdom
Original network provider* Wavecrest (UK) Ltd

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142750

From the domain name registration:

Domain name: revlogistic.com
Updated Date: 2019-08-21
Creation Date: 2018-09-20
Registrar Registration Expiration Date: 2020-09-20
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

This is what the fake website looks like:

[firefly]

The fake supplier claims to be a business named First Choice Supplies and uses a fraudulent website active from the domain name firstchoicesuppliesltd.com.

From the fake website:

FIRST CHOICE SUPPLIES LTD is a trading company, based in Shelton street Covenant Garden, London, England and is equipped with extensive trading experience. We have many international collaborations from Far East Asia, American, Australia and Africa.

From their products list - the face masks area:

Contact details:

Address: Shelton street Covenant Garden, London, England
Email: admin@firstchoicesuppliesltd.com
Phone: +44 203 995 5689

+442039955689
Number billable as geographic number
Country or destination United Kingdom
City or exchange location London

Entry in the aa4219 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142902.

From the domain name registration:

Domain Name: firstchoicesuppliesltd.com
Updated Date: 2019-12-09
Creation Date: 2019-12-09
Registrar Registration Expiration Date: 2020-12-09
Registrar: Hosting Concepts B.V. d/b/a Openprovider

Domain Status: ok
Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: Whois Privacy Protection Foundation

This is what the fake website looks like:

[firefly]

The same fraudsters use a second fake website, active from the domain name fcslimited.co.uk, showing the same content as the previous one.

The fake website is promoted with a trading account on eWorldTrade offering face masks for sale:

FIRST CHOICE SUPPLIES LTD - Golden member
Distributor/Wholesaler
LONDON , United Kingdom
fcslimited.co.uk

FIRST CHOICE SUPPLIES., Ltd is an international trading company with their head office located on Shelton street Covenant Garden, London, England.
Our company focuses on the office papers, metals & scraps Agricultural products, food export from Thailand, Vietnam, China, Indonesia, Morocco, Pakistan to clients all around the world.
We work with the best factories to export only top quality product with the best price for you.

Business Type:Distributor/Wholesaler
Main Products:Copper, Aluminum, Cathodes
Main Markets:America, Africa, Asia, Caribbean, Europe, Oceania, Middle East, WorldWide
Established year:2019
Total Annual Revenue:Below US$1 Million
Export Percentage:71% - 80%
Address:71-75 SHELTON STREET COVENT GARDEN. WC2H 9JQ. LONDON ENGLAND

Contact details on the fake website:

Office Address
71-75 SHELTON STREET,
COVENT GARDEN LONDON,
WC2H 9JQ ENGLAND
Phone : +44 203 995 5689

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142903.

From the domain name registration:

Domain name:
fcslimited.co.uk

Data validation:
Nominet was able to match the registrant's name and address against a 3rd party data source on 16-Oct-2019

Registrar:
Namecheap, Inc.

Relevant dates:
Registered on: 14-Aug-2019
Expiry date: 14-Aug-2020
Last updated: 16-Oct-2019

Registration status:
Registered until expiry date.

This is what the fake website looks like:

[firefly]

There is also a 3rd fake website operated by the same fraudsters, active from the domain name fcsuppliesltd.com.

From the fake website:

Company registered in England with registered address in Shelton street London. Our main focus is on office papers
agriculture , metals and metal scraps.We have been able to do business globally with both big and small enterprise. Our main aim is to satisfy clients by providing quality and affordable products on a timely manner.
With the emergence of the December 2019 Corona Virus in Wuhan China that has left many death and some hospitals, we decided to join others to fight this epidermic which has caused fear globally. With our cooperation with some medical experts, we are able to distribute safety equipments such as surgical mask , Gloves and hands sanitisers . we deal with a group of people with high expertise

Contact details:

71-75 SHELTON STREET
COVENT GARDEN LONDON
WC2H 9JQ. ENGLAND
FACE MASK RECEPTION.jpg
+44-203 995 5689
Whatsapp: +44 744 030 2831
sales@fcslimited.co.uk

+442039955689 and sales@fcslimited.co.uk - already reported above.

+447440302831
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Lycamobile UK Limited

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142904.

From the domain name registration:

Domain Name: FCSUPPLIESLTD.COM
Updated Date: 2020-02-09
Creation Date: 2020-02-09
Registrar Registration Expiration Date: 2021-02-09
Registrar: Wix.Com Ltd.

This is what the fake website looks like:

[Big Al]

Email received:

Good day and thanks for the inquiry
yes we can deliver the goods to you
100 000Pcs N95 with delivery
to your address will cost 62000 euros
Payment is 50% advance and 50% after Tracking

Header:

Delivered-To:
Received: by 2002:ac8:246:0:0:0:0:0 with SMTP id o6csp640529qtg;
Sat, 28 Mar 2020 07:42:36 -0700 (PDT)
X-Received: by 2002:a25:a2c6:: with SMTP id c6mr6504345ybn.270.1585406556873;
Sat, 28 Mar 2020 07:42:36 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1585406556; cv=none;
d=google.com; s=arc-20160816;
b=BG7+26EbJA3K81OtEB728FqLWihHi6L1BiV3F+lewnqVmDJhSTm2KdanAROOjbwRyF
GvYmur0qOt2EZ/YzuPskNX3Cb4Fe253D7t3zek3f5gulXIYDt6ESm6jT6IRnD2hsJabD
k6XRz4g5XjJz/a32CIfcyQLeniS2SFMgXV2g5fWbjbIp02yL+DItVh3S8doQ7YJVL3Bn
udT1YIyXvQYOy2KsOZn0rh9/aVQeovnkie0Q9vUxZWqlZfbZrrUoib+eaV3QN8Y7IAgY
kr8mo6uowlf8rqYpPkW6ZIBeXzeEjGhr8ZaQSldq+QCSKzvfBFo5No688yrCgQZU6N/N
JfPw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:dkim-signature;
bh=H3+W76T7FVld6WSmV1ZyvZmIFiDFNTzQKjlbbeH8gHA=;
b=TAMKGLLKXbpE4iYk6gJrm8Tn4USrvVimOkuQ2me7NvnSZ65mj1mJF/zkrkpQim6V9p
YBccxQTLsds3wJD+69i0r8A9K5pTxQLlihn6heuO2NK85xvCNYW4A2PjyULOl7qGe+E1
QaWiuzwu4UDITSjhS20WeFlyWSa9zqAA8BsXjmyhSUww7/WrVaeeWvoaYb7w7JUDlEWf
eBVCnBmm/F0X4kYzXzzGoYgrya7A6FlM0LNdMV7FKh0CZViOJ4drfpn5SIJvbiFWGB1k
Z586Lr43ZdAwXGP6egmBUVaeYAZtajmKftiwva6mHc9JfQdmcsqjaznjPT2eaEf4uZI/
w6IA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@fcslimited-co-uk.20150623.gappssmtp.com header.s=20150623 header.b=dg6ILVAr;
spf=softfail (google.com: domain of transitioning sales@fcslimited.co.uk does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=sales@fcslimited.co.uk
Return-Path: <sales@fcslimited.co.uk>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id n12sor5422509ybg.17.2020.03.28.07.42.35
for < >
(Google Transport Security);
Sat, 28 Mar 2020 07:42:35 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning sales@fcslimited.co.uk does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
dkim=pass header.i=@fcslimited-co-uk.20150623.gappssmtp.com header.s=20150623 header.b=dg6ILVAr;
spf=softfail (google.com: domain of transitioning sales@fcslimited.co.uk does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=sales@fcslimited.co.uk
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=fcslimited-co-uk.20150623.gappssmtp.com; s=20150623;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=H3+W76T7FVld6WSmV1ZyvZmIFiDFNTzQKjlbbeH8gHA=;
b=dg6ILVArCg1TsvOexCHsOXHrSzVF/D+ISqeYIZddOBF6aC/eUk3aQ4TtgSBkv2Gwtp
MHfVMJ2cXck4p1rG5wAfpzXAM1X1873wZXn/m7g9+eEy4X4JgRPgjC4rtPPagJnyhJXw
L3bdhu0G2rQfdMf+8YcpD2sLDF8t6Ku8GFyHHZh9nLP+T5ktr/cCLNFFkgo2Ms6PVnzu
IUJpa/v4j6dImk1e9rJ8fRaCyLsxz6j8UWMkyUD4XvNvZTd1HxrkxxU4v7N5vImCcIWb
vQ2sDBnxegi72a8Bp5AhAvObZiBdtp4j0OOFTzkaEjdv3uHbKWF2+xRNIn6Fds9dyyXY
gt+w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=H3+W76T7FVld6WSmV1ZyvZmIFiDFNTzQKjlbbeH8gHA=;
b=K7XVFFTYbghWGs67GdbDjJP7XbFlC8177cGyBzc6u5O8crT3QXn20wjyNZE00sqkpl
5HvpIHEgMdVE0fI+6IrnQsN7DoFrZ6e3BMEL7BP2xYmNx6fGyEJ3VR7FnNsKlGbEvlVm
u4h7c15pVC8wG7YyRgVswpXJQcTiL4B9kQNmLQG/osWXt+UMRAFOc5r0SRwri9uioCwv
hqxvY75lz7PDuMU90Q6fvEMQ/auyeg4hAlRiyTtSCT/mE+IrtHFCXlR9OVFRNfzMUNg5
SZc0dHA/ZR53a4R9SRF7Uciax/sfmge9o+ejYHxm8oGxd93HGYMSy4Q1HsA7y0wow2ur
arew==
X-Gm-Message-State: ANhLgQ2ZV47JtUNhJLMSuECY8iY6zqJh15rgWuUq2OKSZnE/xfgke159 s1wJrqwRRF3/jvQs9cUaL+BZTNs6oAQm6GBmKwcLSZM=
X-Google-Smtp-Source: ADFU+vvd4Yldg7JFrDhlNlg/Vrk7IjlcE59hWFEHriQQRoDi1tih4aT06YlAhTGtg44IhAoM//zv6twzL50YQIvxSSs=
X-Received: by 2002:a25:3d83:: with SMTP id k125mr6308716yba.239.1585406554686; Sat, 28 Mar 2020 07:42:34 -0700 (PDT)
MIME-Version: 1.0
References: <CAAbCh5uryzW7E1CPa-zt=xSAAUGx5eCzi3d+oxGTVWvFrm4fKQ@mail.gmail.com>
In-Reply-To: <CAAbCh5uryzW7E1CPa-zt=xSAAUGx5eCzi3d+oxGTVWvFrm4fKQ@mail.gmail.com>
From: First Choice Supplies Ltd <sales@fcslimited.co.uk>
Date: Sat, 28 Mar 2020
Message-ID: <CAJzt78LNi1FhvCFtOPz1zP5grvKgqt=8fqEBM-yCX0f_aF3FSA@mail.gmail.com>
Subject: Re: N95 Masks
To:
Content-Type: multipart/alternative; boundary="000000000000845d0205a1eb3a9f"

--000000000000845d0205a1eb3a9f
Content-Type: text/plain; charset="UTF-8"

[Big Al]

Please send details

Your name
Your address
Zip code
Phone Number
Telephone

Once we have above details then we can send proforma invoice

[Big Al]

ATTACHED IS PROFORMA
All amounts converted to USD and
bank details on bottom left corner

Bank account information from the fake invoice:
BENEFICIARY: M. K. F. LTD
WIRE TRANSFER NUMBER: 02607XXXX
ROUTING NUMBER (ACH/ABA): 026073150
ACCOUNT NUMBER : 831060XXXX
BANK CODE (SWIFT/BIC): CMFGUS33
ADDRESS: NEW YORK USA.

[Big Al]

What did your bank say the problem was ?

[Big Al]

if bank manager cant tell why transaction failed maybe
he did not send the transactions at all and he wont send
even if we give another account

It does not add up. How can a failed transaction be CONFIDENTIAL
There is no confidentiality in that

Thats the same account we have used all the time with our USA clients


what do you suggest ?