Nestle Award - ralphnwin@outlook.com

[firefly]

Lottery scam.

NESTLE GLOBAL LTD
#1 City Place
Gatwick,RH6 0PA
United Kingdom
Tel: +447778162366

Dear Winner,

This is to inform you that your email address has won a prize money of Six Hundred and Fifty Thousand Great Britain Pounds (650,000.00 GB Pounds) for the 2022 NESTLE ANNIVERSARY DRAW in United Kingdom. To claim your fund send your name,address,age and mobile number to Mr. Ralph Christopher on this email address below:

Name: Mr. Ralph Christopher
Email: ralphnwin@outlook.com
Your Reference Number: NST/010MZ1520

Congratulations once again

Yours in service,
Mrs.Lucy Peter.
Nestle Award Center

Header:

Return-Path: <ralphnwin@outlook.com>
Date: Mon, 5 Dec 2022 05:17:52 +0000 (UTC)
From: NESTLE GLOBAL LTD <ralphnwin@outlook.com>
Message-ID: <548599783.641497.1670217472971@mail.yahoo.com>
Subject: Nestle Award Center win 2022/2023
X-Mailer: WebService/1.1.20926 YMailNorrin

[Wayne]

Scammer's email address.: ralphnwin@outlook.com

Content of the email.: NESTLE GLOBAL LTD
#1 City Place Gatwick,
RH6 0PA United Kingdom
Tel: +44 (0) 42034326
E-Mail: ralphnwin@outlook.com

Dear xxxx,

Thanks for your kind response and you are advice to open the attachment file and fill the needed details immediately then send the form to the Lloyds TSB Bank Plc to enable the bank start processing your winning fund immediately.

Congratulation once again

Yours Faithfully,
Mr. Ralph Christopher
Prize Administrator.

[Wayne]

Scammer's email address.: ralphnwin@outlook.com

Content of the email.: NESTLE GLOBAL LTD

#1 City Place Gatwick,

RH6 0PA United Kingdom

Tel: +44 (0) 42034326

E-Mail: ralphnwin@outlook.com

Date: 06/12/2022

Dear Winner,

We acknowledge the receipt of your mail with regard to the email which was sent to your email address from our grant department to announce the result of the just concluded Nestle Global International Covid-19 grant which you have been selected to qualify for the sum of £650,000.00.The Global Email Covid-19 Grant of the Nestle head office United Kingdom is no doubt a momentous achievement in the chequered history of this Organization.

Your email address attached to ticket number: 10292014 with Batch number: 009/15/NCUK drew the lucky numbers: 05 18 33 50 25, which won in the 1st category of the draw. Your grant is £650,000.00 (Sex Hundred and Fifty Thousand Great British Pounds) in cash and has been credited to file number: LYDBK-TEMP/ACC 1190062261. A total cash grant of awarded £650,000.00 (Six Hundred and Fifty Thousand GB Pounds) was shared among the 526 lucky winners across the globe in different categories. All participants were selected randomly from the Internet and the International Email address Database Directory, and extracted from over 100,000 unions, individuals, associations and corporate bodies that are listed in the email Directory which tallies in our bid to cushion the present and after effect of the Coronavirus pandemic currently ravaging the world and to make poverty a history. I write to acquaint you with guidelines that you must follow in order to complete your claims. On our part, we have a mandate to see you through, we will work assiduously to realize this mandate as we respect your views, opinions and most importantly protect your Privacy.

Your winning reference number or pin(NCov19-8960045) fall within the London location file and must be claimed here in London, United Kingdom following all mapped out processes and everything has been laid down to make the claim easy and straight for you. For security and claim purposes, your winning fund has been deposited with our affiliate banker/financier; You are advised to send information’s below to the Remittance Department of Lloyds TSB Bank Plc by e-mail on: remitlloydsbnkplc@gmail.com or lloydsbnkplc@accountant.com so that they can process it and release your fund to you. Email: remitlloydsbnkplc@gmail.com or lloydsbnkplc@accountant.com Contact Person: Dr. Bolton Davis Divisional Director of Remittance

Full name.......................................
Address.........................................
Age...............................................
Sex...............................................
Nationality......................................
Mobile Telephone #..........................
E-mail address.................................
Marital Status..................................
Occupation......................................
Grant Amount....................................

The following PIN# (Personal Identification Number) has been assigned to you and you are required to quote it in every mail that you send to us and the bank: NCov19-8960045

You are warned to keep your winning information to yourself until your fund is released to you to avoid double claim which will lead to absolute cancellation/termination of the grant. We also do not tolerate Laxity and inconsistency in claim.

NOTE: This Draw is solely conducted by Nestle Global Company United Kingdom and cannot be claimed through any of our Regional Offices in your Country/Area. All communications must be through this office here in England.

Once again, we congratulate you for this landmark achievement and implore you with the responsibility of ensuring successful claims. The bank shall get back to you with the Fund release Directives on our receipt of your personal details as requested above so endeavor to contact the bank and send the above requested information to them without further delay as directed.

Yours Faithfully,

Mr. Ralph Christopher

Prize Administrator.

[Big Al]

NESTLE GLOBAL LTD
#1 City Place
Gatwick, RH6 0PA
United Kingdom
Tel: +447778162366

Dear Winner,

This is to inform you that your email address has won 650,000.00 GB
Pounds in the going Nestle Global Covid-19 pandemic email Draw in UK
2023.

To claim your prize fund, send your name, address, age and mobile number
to Mr. Ralph Christopher on this email address below.

Name: Mr. Ralph Christopher
Email: winclaim01@outlook.com
Your Reference Number: NCov19-8960045

Congratulations once again

Yours in service,
Mrs.Lucy Peter.
Nestle Award Center.

Header:

Return-Path: <mmaher@ac.upatras.gr>
Received: from xmail1.upnet.gr (HELO webmail.ac.upatras.gr) ([150.140.129.42])
Date: Tue, 10 Oct 2023 15:12:12 -0700
From: Nestle Award Center <mmaher@ac.upatras.gr>
To: undisclosed-recipients:;
Subject: Congratulations once again
Reply-To: winclaim01@outlook.com
Message-ID: <11883979287ce9a09b88daeb78e5a1c9@ac.upatras.gr>

Orig IP: 150.140.129.42 | Orig ISP: National Infrastructures For Research And Technology S.a. | City: Pátra | Country: Greece

[Big Al]

NESTLE GLOBAL LTD
#1 City PlaceGatwick,
RH6 0PAUnited Kingdom
Tel: +44 (0) 42034326
E-Mail: nclaim03@gmail.com
Date: 10/12/2023

Dear Winner,

Thanks for your response, I hereby advice to open the attachment file Application form and fill the necessary needed information’s immediately.

After you completed filling the Application form send it to the Remittance Department of Lloyds TSB Bank Plc by e-mail on: transfer@rbsscot.com so that they can process your winning prize and transfer your fund to you.

Congratulation once again

Yours Faithfully,
Mr.Ralph Christopher
Prize Administrator.

From the attached form:

NESTLE GLOBAL LTD
#1 City PlaceGatwick,
RH6 0PAUnited Kingdom
Tel: +44 (0) 42034326
E-Mail: winclaim01@outlook.com
Date: 10/12/2023
 
Dear Winner,
We acknowledge the receipt of your mail with regard to the email which was sent to your email
address from our grant department to announce the result of the just concluded Nestle
Global International Covid-19 grant which you have been selected to qualify for the sum of
£650,000.00.The Global Email Covid-19 Grant of the Nestle head office United Kingdom is no
doubt a momentous achievement in the chequered history of this Organization.
Your email address attached to ticket number: 10292014 with Batch number: 009/15/NCUK
drew the lucky numbers: 05 18 33 50 25, which won in the 1st category of the draw. Your grant
is £650,000.00 (Six Hundred and Fifty Thousand Great British Pounds) in cash and has been
credited to file number: LYDBK-TEMP/ACC 1190062261. A total cash grant of awarded
£650,000.00 (Six Hundred and Fifty Thousand GB Pounds) was shared among the 526 lucky
winners across the globe in different categories. All participants were selected randomly from the
Internet and the International Email Directory, and extracted from over 100,000 unions,
individuals, associations and corporate bodies that are listed in the email Directory which tallies
in our bid to cushion the present and after effect of the Coronavirus pandemic currently ravaging
the world and to make poverty a history. I write to acquaint you with guidelines that you must
follow in order to complete your claims. On our part, we have a mandate to see you through, we
will work assiduously to realize this mandate as we respect your views, opinions and most
importantly protect your Privacy.
Your winning reference number or pin (NCov19-8960045) fall within the London location file
and must be claimed here in London, United Kingdom following all mapped out processes and
everything has been laid down to make the claim easy and straight for you. For security and
claim purposes, your winning fund has been deposited with our affiliate banker/financier; You
are advised to send information’s below to the Remittance Department of Lloyds TSB Bank Plc
by e-mail on: transfer@rbsscot.com so that they can process it and release your fund to you.
Email:  transfer@rbsscot.com
Contact Person: Dr. Bolton Davis
Divisional Director of Remittance
Full name.......................................
Address.........................................

Age...............................................
Sex...............................................
Nationality......................................
Mobile Telephone #..........................
E-mail address.................................
Marital Status..................................
Occupation......................................
Grant Amount....................................
The following PIN# (Personal Identification Number) has been assigned to you and you are
required to quote it in every mail that you send to us and the bank: NCov19-8960045
You are warned to keep your winning information to yourself until your fund is released to you
to avoid double claim which will lead to absolute cancellation/termination of the grant. We also
do not tolerate Laxity and inconsistency in claim.
NOTE: This Draw is solely conducted by Nestle Global Company United Kingdom and cannot
be claimed through any of our Regional Offices in your Country/Area. All communications must
be through this office here in England.
Once again, we congratulate you for this landmark achievement and implore you with the
responsibility of ensuring successful claims. The bank shall get back to you with the Fund
release Directives on our receipt of your personal details as requested above so endeavor to
contact the bank and send the above requested information to them without further delay as
directed.
Yours Faithfully,
Mr. Ralph Christopher
Prize Administrator.

Phone: +44042034326
Note: 103. This telephone number is most likely a Guernsey number. Specific information on this number range is not available. This might mean that this particular telephone number does not exist. Should this be incorrect, be sure to notify us.

[Big Al]

Attn:

Welcome to Lloyds Bank Plc, We acknowledges the receipt of your attachment email regarding the fund that has been deposited with our bank here in United Kingdom.

All verification has been done from the United Kingdom Ministry of Finance in accordance with section 13(1) (N) of the International fund transfer act as adopted in 1993 and amended on 3RD July 1996 by the constitutional assembly. The fund has been fully processed by the insurance & ministry of finance endorsement stamps and the Approval Signature. We want you to understand that you need to pay the sum of (1,000.00 United State Dollars) been the certain and official charge of opening online bank account with Lloyds Bank Plc, Because we cannot transfer the fund into your personal bank account in your country as our banking role.

Kindly contact the Lloyds Bank cashier through the desk e-mail address and he will give you the directive of the said payment. The payment is for the purpose of opening/creating online bank account for you, so that you can access the online bank account with your given user name and password for easy and smooth transfer of the fund as our banking rule stipulated.

Note: The fund have been protected by Professional Hand Coverage Insurance Policy (PHCIP), and it has to be remitted to you in full Value. As the matter of fact, the (1,000.00 United State Dollars) fee which you are obligated to pay as the opening/creating of online account shall be credited into your new created account as the available transferable balance. The total sum of 651,000.00 GB Pounds will be credited to your new online account.

Thank for your time and urgent attention to these vital information/requests as we are committed in delivering high quality banking services to suit your needs. For payment contact our cashier through this desk E-mail: account@rbsscot.com and your urgent reply needed to enable us fasten the process of your funds transfer.

We have attached the account Opening Form here, you are required to fill and return it with the account opening amount immediately.

Best Regards,
Mr.Charles Henry
Account Manager.

Header:

Delivered-To:
Received: by 2002:a17:906:b7ce:b0:9b9:9cb3:d10 with SMTP id fy14csp2073847ejb;
Fri, 13 Oct 2023 01:31:34 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IFkLpL7xFiWezOo7jmzVY4IRH0wOHjHl6bfQ4V5G+72QvmIYB21NEBYs8y/RIMbVMah0qyo
X-Received: by 2002:a7b:ce85:0:b0:405:4a78:a890 with SMTP id q5-20020a7bce85000000b004054a78a890mr22755774wmj.8.1697185893389;
Fri, 13 Oct 2023 01:31:33 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1697185893; cv=pass;
d=google.com; s=arc-20160816;
b=r0IxSr08YuY9+gvBwvFLueTafX4/YhMtyIDvqBYgGZ6rVRuHmTyAS782sftyiKuzOY
P87jFJVoC6DTVcmv6lbmOVne1bpXKtCu8VKc6pVKEZSvA+I9tOGBCRfnnIX4496r8YO3
8F8flKEHKhuRrMPBT4DVfbKfShtPbHhrrEtCbPS/PtHX6wysbgU9cZXz3ckS50izT9S1
bJg6/Wf5F297N/9j2wRLb0DYmypRI81czahoKguRBC8QnSrp1rm0sE+bNrZqCDbQjiPo
ps8XC3lg05Iqr9fWWzQhlAqcRTna6W8I7y4OIeBzYq86MeRCi8ym9H7caUKXn7HwMy2Z
vMiw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:references:in-reply-to:subject:to:from:date:mime-version;
bh=IQtOBwfehvd1d4oMu4+wyOobCvqd24OnlLF24a/mzTc=;
fh=1sHkQJ/xbgGUbbhsRYBis8OU8h3NdbF+/Og171TwfaY=;
b=BB5EU/g3pamqNajNPghNdzD25wLkovUlExzOLkSHTQlYnF77YmDrWqNNSkj7mAaE49
L/9XAoHR12H4LDr+bSlzjQdKN+VKgGOi+yds0QBlMrm+mkY/9kV+ERweG6WypRKs5X5y
YRbzZqoKTHuYJQr0g8IO477s/QmDlLLm0lQcfhYD09urQzrWLVYZJxcL08Eei5Wni+T4
3eJJVv/cxQKxTz3pQjZ03fxUArsFtPdya4M9cwvTG2mEXX8zON3tV7fgTTQhJNvlPPC5
1Ff/ee1bPlrZBCGFGyJ3flULG9ARvKcDS/TXqwiMRur0PWqP0q5Z6NCqSNVkLkkgTwJu
txkQ==
ARC-Authentication-Results: i=2; mx.google.com;
arc=pass (i=1);
spf=pass (google.com: domain of transfer@rbsscot.com designates 185.151.28.66 as permitted sender) smtp.mailfrom=transfer@rbsscot.com
Return-Path: <transfer@rbsscot.com>
Received: from relay2.stackmail.com (relay2.stackmail.com. [185.151.28.66])
by mx.google.com with ESMTPS id s3-20020a05600c384300b004060f0b633csi855189wmr.49.2023.10.13.01.31.33
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Fri, 13 Oct 2023 01:31:33 -0700 (PDT)
Received-SPF: pass (google.com: domain of transfer@rbsscot.com designates 185.151.28.66 as permitted sender) client-ip=185.151.28.66;
Authentication-Results: mx.google.com;
arc=pass (i=1);
spf=pass (google.com: domain of transfer@rbsscot.com designates 185.151.28.66 as permitted sender) smtp.mailfrom=transfer@rbsscot.com
ARC-Seal: i=1; cv=none; a=rsa-sha256; d=relay2.stackmail.com; s=s1;
b=PZraWw4TyscC1fWYvjvz+o2ITKoEptwE7h4x5AwuDP7r+FopLuYLu9TOvJonSr7e4wuHaSr0kN
3qEf6BAqwJ5p4rE4aq1V/z2hDJ5NxGXpu5iGt7PMa4N6OoJKqYaxf11P/0RFQs0v3A5BqqvQjB
09bvzdMFFNQV4OIb0tfOhU8jfOkhTenfW6iVzc71G+WImIoNpjKBe8Gt83awWwmHRVp7nVDTfL
BN9lsotHg6ouZj3MIXZcXJdVSEs7l2c2jEPTfgfLmqiCFGIJBb3t0UasD7knG81SEWlPLZVVK0
RnR2gmFZjGrL0AKdr6SUk1d9s3RdoaseiTMBtjcag1JQ1w==;
ARC-Authentication-Results: i=1; relay2.stackmail.com; iprev=fail smtp.remote-ip=10.4.13.36
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=relay2.stackmail.com; s=s1; bh=jPVWMx4m4In+bkxiKZbiawHj0l34DnarPBp7nu0ED7o=; h=Content-Type:Message-ID:References:In-Reply-To:Subject:To:From:Date:
MIME-Version; b=s5fAjrp0ntQaCFlQ131uc9JnFrvNw0wEkg1MncKGqWgX0hgj70Zj15QJNpE8xYjOVgjPpkpXx8
UoHibM6gnWBD7K76KIU2gzcfwSZyiotfn4Rl/ST8mO1mEvwayP3k1EQ7rS4Sas8o33+5d2lbTl
IOD44DtHjhqczCdAj7Ie85ED4sZRKeqLotbUUbEkEND0czSbugtBsSErCkHLVxVhz/UerE2BHp
MG+bFOLZFaKnH50tM3KLEEqvVF+vLLS+Pl4KDr5sUTnYS0g3zGMuhKX6pi7QjLqshnzJehGV5j
DrjV82m6avLk/YH4eGPDFZz36rHg8oO77tYVYLq6Ps6D2w==;
Authentication-Results: relay2.stackmail.com; iprev=fail smtp.remote-ip=10.4.13.36
Received: from [10.4.13.36] (helo=smtp2.lhr.stackcp.net) by relay2.stackmail.com with esmtps
(TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <transfer@rbsscot.com>) id 1qrDa0-0003Y7-1Z for ; Fri, 13 Oct 2023 09:31:32 +0100
Received: from [45.8.227.175] (helo=www.stackmail.com) by smtp2.lhr.stackcp.net with esmtpa (Exim 4.96) (envelope-from <transfer@rbsscot.com>) id 1qrDa0-0006uj-2B for ; Fri, 13 Oct 2023 09:31:32 +0100
MIME-Version: 1.0
Date: Fri, 13 Oct 2023 01:31:32 -0700
From: Lloyds Bank <transfer@rbsscot.com>
To:
Subject: ACCOUNT OPENING FORM
In-Reply-To: <CABd=3yjLEhtUPRLLvC4vjas4s3WgLXzBz5+N4kEYWr+7btbK3w@mail.gmail.com>
References: <11883979287ce9a09b88daeb78e5a1c9@ac.upatras.gr> <CABd=3yg-BepvL9rkRuSwZn7F7APjz7=ZmRNFH03rCMkpDtkHug@mail.gmail.com> <LO2P123MB3615182FA849F4F9E950EB69C7D3A@LO2P123MB3615.GBRP123.PROD.OUTLOOK.COM> <CABd=3yjLEhtUPRLLvC4vjas4s3WgLXzBz5+N4kEYWr+7btbK3w@mail.gmail.com>
Message-ID: <c11350b72dad0b91b581491cc30a7438@rbsscot.com>
X-Sender: transfer@rbsscot.com
Content-Type: multipart/mixed; boundary="=_9b62c0ca125f5175f8367536e20fb2e6"
X-Authenticated-Sender: transfer@rbsscot.com
X-Scan-Signature: 1930d9f7a872a88e27d956b4f2edd8b4

--=_9b62c0ca125f5175f8367536e20fb2e6
Content-Type: multipart/alternative; boundary="=_3f02c6e7475f70122be737d2128d2f98"

--=_3f02c6e7475f70122be737d2128d2f98
Content-Transfer-Encoding: 7bit

Orig IP: 45.8.227.175 | Orig ISP: 20i Limited | City: n/a | Country: United Kingdom

[Big Al]

Attn:

You can send your details to us since you are unable to download the Form.

Kindly contact our bank cashier on email immediately and request her to provide you payment details for Online Account Opening to enable us start the process as soon as possible.


Best Regards,
Mr.Charles Henry
Account Manager.

[Big Al]

Dear Customer,

Following the receipt of your email, I was directed to provide you Ria Money Transfer details for the Online Account Opening fee.

You are required to proceed to any Ria Money Transfer nearest to you immediately and make a cash deposit of $1000 into the following details below.


First Name S.
Last Name F.

As soon as you make the payment, attach the evidence of payment (deposit copy from bank) and send it to us through email. Hence we confirm your payment; we shall create the online banking account for you within 3 working hours.

Yours in Service,
Dr. Helen Smith
(Head of Cashier)

Header:

Return-Path: <account@rbsscot.com>
Received: from [45.8.227.175] (helo=www.stackmail.com) by smtp1.lhr.stackcp.net with esmtpa (Exim 4.96)
Date: Mon, 16 Oct 2023 01:19:57 -0700
From: Lloyds Cashier Department <account@rbsscot.com>
Subject: Payment Directive
Message-ID: <851a09bc9a2be8ddfa16175bc4746ffc@rbsscot.com>

Orig IP: 45.8.227.175 | Orig ISP: 20i Limited | City: n/a | Country: United Kingdom

[Big Al]

Dear Customer,

Kindly transfer the required fee to the provided bank account below immediately and send payment slip via email attachment.

Bank name: Ampere bank
Account name: W. L.
IBAN number: GB27PAYR04035974XXXXXX
SWIFT/BIC PAYRGB2L
Bank Address Waterhouse Square 138 Holborn,
London
EC1N 2SW
United Kingdom


Yours in Service,
Dr. Helen Smith
(Head of Cashier)

[firefly]

The scammers pretend to represent Lloyds Bank, but the fake website used is a spoof of Royal Bank of Scotland.

The fake website shows no contact details.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=163887

From the domain name registration:

Domain Name: rbsscot.com
Updated Date: 2023-10-08
Creation Date: 2023-04-04
Registrar Registration Expiration Date: 2024-04-04
Registrar: NameSilo, LLC
Reseller: QHOSTER.COM

Registry Registrant ID:
Registrant Name: wenne Appolus
Registrant Street: no 18 Benson Road
Registrant City: imc
Registrant State/Province: imc
Registrant Postal Code: 23454
Registrant Country: NG
Registrant Phone: +234.07034802351
Registrant Email: whatsappmedia@yahoo.com

This is what the fake bank website looks like: