rbportal.org

The fake website claims to be Barclays Bank on one page and Reserve Bank of India on another one:

The fake site is operated by fraudsters located in Nigeria.

Contact details used:

9th Floor, South Quay Building, 189 Marsh Wall, London, E14 9SH
Email: customer@barclays.forexremit.org

The fraudulent domain name used for the email address, forexremit.org is already suspended.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=149628.

From the domain name registration:

Domain Name: rbportal.org
Updated Date: 2021-04-29
Creation Date: 2020-05-22
Registrar Registration Expiration Date: 2021-05-22
Registrar: Google LLC

Registry Registrant ID: go13668454160
Registrant Name: Contact Privacy Inc. Customer 1247283461

Same stolen location, same email address, another fake: rbhonline.org, pretending to be also Barclays Bank and Reserve Bank of India.

From the fake website:

Our ethos is to be fair and transparent. SMEs and PSPs that choose to work with us benefit from the low-cost basic corporate banking products we offer. We have a strong focus on international transactions and multi-currency cash management services.

Contact details:

9th Floor, South Quay Building, 189 Marsh Wall, London, E14 9SH
customer@barclays.forexremit.org

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=149627.

From the domain name registration:

Domain Name: rbhonline.org
Updated Date: 2021-02-10
Creation Date: 2020-06-12
Registrar Registration Expiration Date: 2021-06-12
Registrar: Google LLC

Registry Registrant ID: go11507916576
Registrant Name: Contact Privacy Inc. Customer 1247449588
Registrant Organization: Contact Privacy Inc. Customer 1247449588

This is what the fake website looks like:

Same story again with onlinebarclaremitance.com - this time spoofing only Barclays:

Contact details:

9th Floor, South Quay Building, 189 Marsh Wall, London, E14 9SH
Email: customer@barclays.forexremit.org

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=149619.

After being reported on April 10, the fake bank website was suspended.

From the domain name registration:

Domain name: onlinebarclaremitance.com
Updated Date: 2021-04-28
Creation Date: 2021-03-06
Registrar Registration Expiration Date: 2022-03-06
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC
Domain Status: clientHold
Registry Registrant ID:
Registrant Name: Withheld for Privacy Purposes
Registrant Organization: Privacy service provided by Withheld for Privacy ehf

A last clone identified so far is active from the fraudulent domain name myrbsonline.com, pretending again to be Barclays Bank and Reserve Bank of India in the same time.

From the fake website:

Our ethos is to be fair and transparent. SMEs and PSPs that choose to work with us benefit from the low-cost basic corporate banking products we offer. We have a strong focus on international transactions and multi-currency cash management services.

Contact details:

9th Floor, South Quay Building, 189 Marsh Wall, London, E14 9SH
customer@barclays.forexremit.org

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=149617.

From the domain name registration:

Domain name: myrbsonline.com
Updated Date: 2021-02-17
Creation Date: 2021-02-17
Registrar Registration Expiration Date: 2022-02-17
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: Withheld for Privacy Purposes
Registrant Organization: Privacy service provided by Withheld for Privacy ehf

This is what the fake website looks like: