raymondcheng095@gmail.com

[firefly]

Good day ,

Did you receive our previous Email?

Regards,
Raymond

Header:

Return-Path: <raymondcheng095@gmail.com>
From: Raymond Cheng <raymondcheng095@gmail.com>
Date: Mon, 11 Apr 2022 07:40:28 -0500
Message-ID: <CAE-GejS1woSifO2Gb-wOri_J68KUM72zvfDqYySApnQLK1wu_g@mail.gmail.com>
Subject: Reminder

[firefly]

The out of the blue email posted above is part of a job scam - searching for money mules.

The email sent to raymondcheng095@gmail.com received a reply from raymondxucheng14@yuenchengs.com.

Yuen Cheng Engineering &
Shipbuilding Company Limited.
210/F, One Kowloon, 1 Wang Yuen Street,
Kowloon Bay, Hong Kong.
Tel: 852-2746-2000
Fax: 852-2307-5500

To: Representative ,

Good day, Thank you for your swift responses. We have a vacancy for Accounts receivable representative position and Business partner from your region in our company. Kindly revert back immediately.

Thank you for your time, God blesses your home.

Regards

Raymond Xu Cheng
President/CEO
Email: raymondxucheng14@yuenchengs.com
Tel: +85230284986
For WhatsApp only: +85266201562

+85227462000 / +85223075500
Number billable as geographic number
Country or destination Hong Kong
City or exchange location Xianggang (Hong Kong)
Original network provider* PCCW - HKT Telephone Ltd

+85230284986
Number billable as geographic number
Country or destination Hong Kong
City or exchange location Xianggang (Hong Kong)

+85266201562
Number billable as mobile number
Country or destination Hong Kong

Header:

Return-Path: <raymondxucheng14@yuenchengs.com>
X-Originating-Ip: [5.45.198.246]
Received: from 5.45.198.246 (EHLO forward103j.mail.yandex.net)
From: Xu Raymond <raymondxucheng14@yuenchengs.com>
Subject: Re: Reminder
X-Mailer: Yamail 5.0
Date: Mon, 18 Apr 2022 16:36:29 +0100
Message-Id: <1025331650296186@mail.yandex.com>

Originating IP: 5.45.198.246
Originating ISP: Yandex Llc
City: Moscow
Country of Origin: Russian Federation

[firefly]

Reply received:

Yuen Cheng Engineering &
Shipbuilding Company Limited.
210/F, One Kowloon, 1 Wang Yuen Street,
Kowloon Bay, Hong Kong.
Tel: 852-2746-2000
Fax: 852-2307-5500

To: Representative ,

Thank you for your swift responses, Kindly see attached file for all detailed information and requested requirements for further advise, More also we have a large scale of clientele / customers from your region which encompasses North America / Canada and you would be the only already available accounts receivable representative for our company after endorsement by the board of executives.

In the light of the above, do revert back with the said details for verification and official documentation here in our office for further advice.

Thank you for your time, God blesses your home.

Regards

Raymond Xu Cheng
President/CEO
Email: raymondxucheng14@yuenchengs.com
Tel:+85230284986
For Whatsapp only:+85266201562

Header:

Return-Path: <raymondxucheng14@yuenchengs.com>
X-Originating-Ip: [5.45.198.243]
From: Xu Raymond <raymondxucheng14@yuenchengs.com>
X-Mailer: Yamail
Date: Mon, 25 Apr 2022 15:48:39 +0100
Message-Id: <261241650898085@mail.yandex.com>

Fake document received with the message:

[firefly]

Content of the fake document:

Yuen Cheng Engineering & Shipbuilding Company Limited.
210/F, One Kowloon, 1 Wang Yuen Street, Kowloon Bay, Hong Kong
Tel: 852-2746-2000
Fax: 852-2307-5500
Our Ref: ................................
Your Ref: ...............................

Dear Sir / Madam
PRE-REQUISITION

To: Representative,

Thank you very much for your response to our email, I am Raymond Xu Cheng President/Founder of Yuen Cheng Engineering & Shipbuilding Company Limited, A Shipbuilding Engineering Co., Ltd. is one of Hong Kong's most leading engineering companies. We provide high-quality shipbuilding, ship repair and engineering services for onshore Asia Pacific region. With over 70 years of experience, Wang Tak to provide customers with the highest quality and most efficient services, Our own local and mainland plant and equipment - gondolas row. Warehouse engineering workshop and office buildings readily available, easy to provide streaming operations, accelerate construction progress, improve work efficiency, and absolutely protect the interests of customers. All of our completed projects reflect on the quality of Wang Tak, efficiency persist, and to give customers value the commitment promise fully realized, achieved remarkable success. This is our best assurance to customers. Our Group's businesses include property development and investment, international transport services, distribution of the world-famous industrial equipment and marine equipment, the production of industrial and medical gas, three-dimensional and traditional animation design production. Our global network to provide customers with an extensive and wide range of professional services, your responsibility is to establish a medium of getting to our customers / clients in the Canada / North America making payments for our products through you to us. You do not have to leave your present job for this one because this job offer will be on a part time basis as it comes once in a while and remuneration is on a percentage basis of 10% of the total amount you receive from my customers / client at any time on our behalf.

Please to facilitate the conclusion of this proceedings if accepted, do send us your CV; we sincerely appreciate your willingness in transacting this business project with us. Contact us for more information. Subject to your Satisfaction you will be given the opportunity to negotiate your mode of which we will pay for your services as our payment receiving agent. Kindly forward information below to us:

Official Names:
Contact Address:
Mailing Address:
Age:
Tel Number:
Cell Numbers:
Fax Number:
Gender:
Occupation:
Company Name (IF ANY):
A scanned copy of your form of Identification; i.e. (International Passport or Driver's Licenses)

Thank you for your time, God blesses your home.
………………………….
Raymond Xu Cheng President / CEO

[firefly]

Scammers impersonating the same company are doing the rounds online since 2015 searching for money mules.

The only difference is that back then they were not using a fraudulent domain name while pretending to be the company.

Example on https://www.419scam.org/emails/2015-11/ ... 3039.3.htm:

Reply-To: "mkt10001@gmail.com" <mkt10001@gmail.com>
Date: Thu, 5 Nov 2015
Subject: FROM:Yuen Cheng Engineering and Shipbuilding Company

Yuen Cheng Engineering and Shipbuilding Company
Address: 210/F, One Kowloon, 1 Wang Yuen Street, Kowloon Bay, Hong Kong .

yuen cheng engineering and shipbuilding company,Hong Hong* is in search of competent individuals (or firm) to function as our sales agent/representative in the United State/Canada region. This is a part time offer that won't interrupt your current work or business routine and you can conveniently work from home Indicate your interest in this position and send your details:

Regards

Vikashni Prasad
FOR
Raymond Xu Cheng
Director

[firefly]

The fraudulent domain name is used only for the email address, as in raymondxucheng14@yuenchengs.com.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=156115

From the domain name registration:

Domain Name: yuenchengs.com
Updated Date: 2022-04-22
Creation Date: 2022-02-02
Registrar Registration Expiration Date: 2023-02-02
Registrar: NameSilo, LLC

Registry Registrant ID:
Registrant Name: Domain Administrator
Registrant Organization: See PrivacyGuardian.org

[firefly]

Respond to me as soon as possible I want to have a word with you, Please contact me on this Gmail: yuencheng505@gmail.com thanks.

Header:

Received: from mail2.acceler.co.ke (197-248-234-251.safaricombusiness.co.ke. [197.248.234.251])
From: Dickson Mangah <dmangah@acceler.co.ke>
Subject: urgent mail
Thread-Topic: urgent mail
Date: Mon, 25 Apr 2022 18:33:56 +0000
Message-ID: <1650904469571.47899@acceler.co.ke>
x-originating-ip: [192.168.0.200]

Originating IP: 197.248.234.251
Originating ISP: Safaricom
City: Nairobi
Country of Origin: Kenya

[firefly]

Hello,
I want to talk to you privately, kindly get back to me as soon as possible.

Thanks you.

Header:

Received: from 102.64.222.79
Message-ID: <e44018f18f54a0b53d0a6ab434ba2c61.squirrel@webmail.psu.ac.th>
Date: Thu, 18 Aug 2022 00:51:29 +0700
Subject: urgent mail
From: "Mrs. Yuen Cheng" <xxx@psu.ac.th>
Reply-To: yuencheng505@gmail.com
User-Agent: SquirrelMail

Originating IP: 102.64.222.79
Originating ISP: Gva-canalbox
Country of Origin: Togo

[firefly]

Hello
am Mrs. Yuen Cheng there is something serious that we need to talk about if you are not too busy trying to reply to my personal mail which is chengyuen36362@gmail.com so I can tell you more about the discussion.

My Kind Regards.

Header:

Return-Path: <xxx@customs.gov.my>
Received: from gstmx01.customs.gov.my (gstmx01.customs.gov.my. [218.208.33.101])
Subject: Urgent Reply
Date: Tue, 13 Dec 2022 14:17:35 +0000
Message-ID: <0EDB87A605384544A08394C4483650E603280C6EF2@AZZXMBMA2.JKDM.LOCAL>