sani.ibrahim@nddc-ng.com

[Wayne]

URGENTLY WAITING FOR REPLY.

sani.ibrahim@nddc-ng.com <sani.ibrahim@nddc-ng.com>

Tue, 14 Sept at 04:01

Attention: Beneficiary.


We write to inform you that routine chronological system audit
exercise was embarked on

the forensic searching a fund was reserved approved on your name
mentioned $28.6M USD

scheduled already for payment with a few documentation provision from
your side , using

official veto power in assisting .

Kindly provide this information details,

(1) Full name..................
(2) Home and office address...............
(3) International passport..................
(4) Telephone numbers/bank information details................

This is to enable me immediate release of said fund,
Note imposters played insincerity action has been placed on justice
accordingly.

We thank you for your great service, and is rest assured you will be
paid

Sincerely,


Mrs. Sani Abrahim,

The Finance Department Director/ Audit team head. (IMF)
United States Financial Intelligence Unit (NDDC),

[firefly]

While they pretend in the correspondence to be the United States Financial Intelligence Unit (NDDC), the fake website the scammers are using claims to be the Niger Delta Development Commission (NDDC).

The content is stolen from the real NDDC website.

Contact details on the fake website:

No 167 Aba Road Port Harcourt, Rivers State, Nigeria
info@nddc-ng.com
+234-90-90303535

+2349090303535
Number billable as mobile number
Country or destination Nigeria
Original network provider* Emerging Markets Telecommunication Services Ltd (Etisalat)

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=153077.

From the domain name registration:

Domain Name: NDDC-NG.COM
Updated Date: 2021-08-02
Creation Date: 2021-08-02
Registrar Registration Expiration Date: 2022-08-02
Registrar: Name.com, Inc.

Registry Registrant ID: Not Available From Registry
Registrant Name: Non-Public Data
Registrant Organization: Overseas Credit Union
Registrant Street: Non-Public Data
Registrant City: Non-Public Data
Registrant State/Province: London
Registrant Postal Code: 00000
Registrant Country: GB
Registrant Phone: Non-Public Data

This is what the fake website looks like:

The same "registrant organization" Overseas Credit Union operated as well the fraudulent domain name pandemicstimulus.com, now suspended.