ic3_desk@ic3.co.ke

[Big Al]

Dear Friend

I am Clement Kinsley Director in charge of the compensation funds to scam victims from IC3. The Federal Trade Commission has reached a settlement agreement with IC3 to settle all scam Victim, If you sent money to a Company/Individual you are entitled.

After proper and several investigations and research at Western Union and Money Gram Office, we found your name in Western Union database through Western Union to Nigeria, South Africa, United Kingdom, Malaysia, United States, Benin republic and other countries.

However, in other to compensate you, the financial intelligence unit in conjunction with the IC3 from Counter-terrorism Division is giving out $850,000 dollars each via Western Union as we have initiated the Transfer this afternoon.

Please kindly go to any nearest western union and pick up the money then call me back to send you another $5,200 USD. I will be sending $5,200 USD per day due to western union restriction rate till we complete the total of $850,000 USD. My direct phone line is +254 701694843. Call or Email me once you picked up the money today to enable me send another $5,200 USD.

Here is the Western Union information to pick up the $5,200 that was sent today. To confirm your MTCN visit https:/ /www.westernunion.com/us/en/send-money/app/tracktransfer

MTCN Number: #988-628-3898
Sender’s Name: Wycliffe Mudema Mmonyi
Senders Country: Kenya
Amount: $5,200.00
Question: when
Answer: Today
Authorization: KC Bank Kenya

I am waiting for your call once you pick up this $5,200. Please E-mail me your direct telephone number so that once I make another payment I will call you for the MTCN. Thanks

Thanks & Regards
Clement Kinsley, Director in Charge
IC3 Compensation and Western Union

Live MTCN has been reported to WU.

Header:

Delivered-To:
Received: by 10.200.63.26 with SMTP id c26csp1771328qtk;
Sat, 18 Nov 2017
X-Google-Smtp-Source: AGs4zMZRQse4u1ojXTS7W+QcJWbOV+uUqu2kJpMXletbOvWl6EXXwqr3MLqncRxU8X/sDAhtWTiW
X-Received: by 10.157.72.131 with SMTP id d3mr3215169otf.137.1511015094691;
Sat, 18 Nov 2017
ARC-Seal: i=1; a=rsa-sha256; t=1511015094; cv=none;
d=google.com; s=arc-20160816;
b=hIyDRGql2F9OBEfquTdiaLphzOPNNkiqe2JsvoDqUXxvQV/N6BLV2iAg6IKpIJc95V
ZKd1aZTRlCgnCx4qwaJeghdV0W3QeVFBLkUAFChZCErSUzdqBysVNSCiKnqzG0/AQAbI
BwW9R5nV7EBnMyHPjCHcPdcUPvZnSnmplUDAkA9xM4XooNVhe0qL9xfO2+n85N6kPTTF
LzLaIn/uTMFrGSxRSDGCtbI//F6tboorwPl/kByoltG4FoGDUblxmAF84fWMKW4QpQON
DfFJwJXJghwjCerulbJ2r04qxwwa6UpOgjJxiGBN73ytIW88Mlm8FGKQDU+a8w7DTUIj
ipwg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:dkim-signature:arc-authentication-results;
bh=FAYyDA/FFzTlVGWG9EroBNDrm1X0t8uvDjNgdETL8mA=;
b=R3raahEwinM0gd5wyrTspiRgVy73/0yNBKnO62+CQDsAC9/FP+xKmF/a7I+/WLaRRS
Dhjb8YhciX7lf1UjKKE34s6wIRtiv+rtHRtg/ojg43K7rukn86rVhkREeBRElpFf0KdK
jI1cVpjEFqEHexHFpYzq7C03STSCGXFyb6+6Gx8Jwiq+d5qyYim0kAk1Tbo7K7s442/j
RBD+TvjRYPTGiNqMRL87YdJ3fO9eG2qYJMXT9GtWHq37zkYQ6yOpQoHVncFeLmG2gy11
MjC7WgWLWL6NtKvh7tHmVec+fK7js82G9EJZp6WqX2Y/D/aEE5HoBmkiywXtCC84UIZe
3JiQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@ic3.co.ke header.s=default header.b=mIHB0f1o;
spf=pass (google.com: domain of ic3_desk@ic3.co.ke designates 192.185.49.40 as permitted sender) smtp.mailfrom=ic3_desk@ic3.co.ke
Return-Path: <ic3_desk@ic3.co.ke>
Received: from gateway20.websitewelcome.com (gateway20.websitewelcome.com. [192.185.49.40])
by mx.google.com with ESMTPS id r77si66509oie.232.2017.11.18.06.24.54
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 18 Nov 2017
Received-SPF: pass (google.com: domain of ic3_desk@ic3.co.ke designates 192.185.49.40 as permitted sender) client-ip=192.185.49.40;
Authentication-Results: mx.google.com;
dkim=pass header.i=@ic3.co.ke header.s=default header.b=mIHB0f1o;
spf=pass (google.com: domain of ic3_desk@ic3.co.ke designates 192.185.49.40 as permitted sender) smtp.mailfrom=ic3_desk@ic3.co.ke
Received: from cm11.websitewelcome.com (cm11.websitewelcome.com [100.42.49.5]) by gateway20.websitewelcome.com (Postfix) with ESMTP id 3F365400D0F4B for < >; Sat, 18 Nov 2017 08:24:54 -0600 (CST)
Received: from tahoe.websitewelcome.com ([192.185.2.129]) by cmsmtp with SMTP id G43CeIee9tuxmG43CedgDz; Sat, 18 Nov 2017 08:24:54 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ic3.co.ke;
s=default; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=FAYyDA/FFzTlVGWG9EroBNDrm1X0t8uvDjNgdETL8mA=; b=mIHB0f1odNS4lBTdy9nqqWhY3D 0kneDGrwJivpIed+qwSFk+SbZmpurUYcg2GgCQdui0ef8uuTd+gQft5IJWWyEFKIWDJPqLrCdtiwr XBclRyY0pNHnOqAfVPNALC3oOrg1Gr46+i8Mi0x2qPAKVIPa1ehmGH/a6qQHjKz0MLHo8o5tsrt+C aSzfI1up1DddSpIaTQqfKua6qycCsO2kTjCH1hMe8qnuwUF+Ed4Izq8KwKXrzKT123v17ALMUIVjY 9UPnKteDpcjrjSxvsxfRVkLLz2YYEplOG0IJ/86BB+Cjnhj5q8uxXlpmvA+gG2Db4dwL2aLF5gm2N YJHgBrsw==;
Received: from [197.237.26.69] (port=57199 helo=hp) by tahoe.websitewelcome.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.87) (envelope-from <ic3_desk@ic3.co.ke>) id 1eG437-001252-EQ; Sat, 18 Nov 2017 08:24:50 -0600
From: <ic3_desk@ic3.co.ke>
To: <ic3_desk@ic3.co.ke>
Subject: MTCN Number: #988-628-3898
Date: Sat, 18 Nov 2017 17:24:23 +0300
Message-ID: <008a01d36078$fd2af7f0$f780e7d0$@ic3.co.ke>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_008B_01D36092.227AEF10"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AdNgeNbi8pVXGlE6S4SaekWUcFhvRg==
Content-Language: en-us
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - tahoe.websitewelcome.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ic3.co.ke
X-BWhitelist: no
X-Source-IP: 197.237.26.69
X-Source-L: No
X-Exim-ID: 1eG437-001252-EQ
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (hp) [197.237.26.69]:57199
X-Source-Auth: ic3_desk@ic3.co.ke
X-Email-Count: 52
X-Source-Cap: aWNjb2tlO2FiMTMyNjt0YWhvZS53ZWJzaXRld2VsY29tZS5jb20=
X-Local-Domain: yes

------=_NextPart_000_008B_01D36092.227AEF10
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Profile Elements:
Mohd Bin Salem / mohdbin.salem.1
Active on June 19th, 2017
Managing Director at Al shaikh Group company
April 2002 to present

Studies at Harvard University
Apr 9, 1998 to present
CONTACT INFORMATION
Facebook
http:/ /facebook.com/mohdbin.salem.1
WEBSITES AND SOCIAL LINKS
Websites
https:/ /al-shaikhgrp.com/
BASIC INFORMATION
Gender: Male

Phone:
+254701694843
Number billable as mobile number
Country or destination Kenya
City or exchange location

[Big Al]

Dear

MTCN 988-628-3898

We would like to acknowledge that we have received your email and the File Number #TB658/KKA/089 has been assigned to your MTCN.

Please use this Number # in any further communication in related to this email, for example, by including it in the subject of all future emails as this will enable us to know the amount of money your have received from us via Western Union.

A support representative will be reviewing your request and will send you a personal response shortly.


Thanks & Regards,

IC3 Compensation Center,
473, Hill Gardens Estate, park lands Avenue P.O Box 79291 – 00100

Hello,

Please give us your full name, phone and File number you receive

Thank You

[Big Al]

IC3 COMPENSATION NAIROBI KENYA
WESTERN UNION MONEY TRANSFER OFFICE NAIROBI
473, Hill Gardens Estate, park lands Avenue P.O Box 79291 – 00100

File Number #TB658/KKA/089

The money was sent to you through the Western Union by IC3. Be inform that your fund which was deposited at this KC Bank Under the Federal Government Monitoring Unit, Then the Amount of fund which you have at the bank under IC3 Nairobi is sum of ($850,000 Dollars) which will be transferring at the rate of $5,200.00 per day starting from today.


I want you to know that this is a legitimate transfer and that is why the Bank said that your file that was deposited with your file number # must be activated and put your name as the receiver for pick up. The cost to activate your information which was deposited is $108.00 usd only...

Note: that the amount which you will be receiving each day is $5,200.00 once you send the $108.00 for Activating your file info today.

Be rest assure that as soon you send the $108.00 we must start transferring your fund to you through Western Union Department without any further delay.


This is the payment information you will use to send the $108.00 for this department to release your fund today.

Country... Kenya
City ....Nairobi
Receiver's Name.... Nelly Nafula Ooko
Test Question ......When
Answer.....today

We look forward to your urgent positive response.

I have attached the copy of the payment slip

Regards
Aksana Kandyba

IC3 department
NAIROBI KENYA

+254 701694843

[Big Al]

Dear Sir,

Here is the bank details for the transfer of $108 dollars

Routine number:: FABLKENA
Bank Code: 70
Account Number:: 058000024971
Account Name:: Nelly Nafula Ooko
Bank Name:: FAMILY BANK
Country:: Kenya
City:: Nairobi
Bank Address: 18 Kasarani thika road 00100 Nairobi

Thank you

[firefly]

The fake site used in scam impersonates Internet Crime Complaint Center (IC3) pretending to be Internet Crime Complaint Center / IC3 Compensation Center.

From the fake site:

This is to bring to your notice that approval has been granted on this faithful recommendations, that during the last U.N. meetings held at Nairobi Kenya, it was alarmed so much by the world in the meetings on the loss of funds by various individuals to the Nigerian/African scams artists operating in syndicates all over the world today. In other to compensate scam victims, the U.N Body in conjunction with the Kenyan Government and IC3 from Counter-terrorism Division is now paying 150 victims of this operators $287,000 USD each out of $43,050,000 USD from the approved compensation funds. Due to the corruption and inefficient Banking Systems, the payments are to be supervised by the United Nations Officials and the Central Bank of Kenya as the corresponding paying bank is KCB.

This program is sponsored by the Team of independent assessors then examined by the National Government Development Funds of Kenya, Group-comprising the Department of Political Affairs, Department of Peacekeeping Operations(D.P.O) the Office of the High Commissioner for Human Rights, the African Union Development, the UN Development Fund for women, UN Office on Drugs, Crime and Internet Crimes-in consultation with United Nations Resident Coordinators in the field.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128409:

Domain Name: ic3.co.ke
Updated Date: 2017-05-08
Creation Date: 2017-05-06
Registry Expiry Date: 2018-05-06
Sponsoring Registrar: KWE

Registrant ID: 454072-KENIC
Registrant Name: IC3 D
Registrant Street: Nairobi
Registrant City: Nbo
Registrant State/Province:
Registrant Postal Code: 34567
Registrant Country: KE
Name Server: ns227.kenyawebexperts.com

This is what the fake site looks like:

[Big Al]

Once payment is complete, please inform me so we can proceed as soon as possible

Thank You