info@barristeralimahmood.com

[firefly]

Recovery scam.

Dear,

I am Mr.Omar salim from Saudi Arabia.i contacted you many years back regarding my request to partner with you in moving some of the stolen money we recovered from our corrupt politicians as an Anti-corruption Agent in Saudi Arabia. I contacted you to help me receive the fund then, and invest my share in your country. I ask for your assistance to help me receive the fund in your home address for my investment projects in your country. Via an accredited financial consultant in the person of Barrister Mahmood Ali

I am happy to inform you about my success in getting those funds transferred under the cooperation of a new partner from INDIA. in the person of Mr. Kumar Krisha. Presently I am in new DELHI INDIA. for investment projects with my own share of the total sum. Meanwhile I didn't forget your past efforts and attempts to assist me in transferring those funds despite that things didn't work out as planned, I am very glad God finally answered my prayers.Now contact Barrister Ali Mahmood my very good who will help you facilitate your compensation with GTBANK GHANA I have registered a compensation fund beneficiary with GTBANK GHANA because i have account with them. With their company in your name, please try your best to contact him, then make arrangements to receive your compensation fund,i told him that I will inform you to contact him.

Barrister Ali Mahmood
EMAIL: info@barristeralimahmood.com

Barrister Ali Mahmood for the total sum of.$2,500.000.00 Dollars which I have kept as a compensation fund to appreciate your effort with GTBANK for the attempts you made to assist me in moving those funds to your country. I appreciate your efforts at that time very much, and also I want you to feel free, and get in touch with my attorney, a great qualified lawyer, via email to help you facilitate your fund.

Yours Faithfully
Mr. Omar salim

Header:

Return-Path: <adenekankehinde424@gmail.com>
Reply-To: info@barristeralimahmood.com
From: Omar salim <adenekankehinde424@gmail.com>
Date: Thu, 10 Aug 2023 07:46:50 +0100
Message-ID: <CAAHYdf4Mirj=DpbwSkXTvBHQww6+vhWWyLjivOmyH+OKhtJH4g@mail.gmail.com>
Subject: Dear,
To: undisclosed-recipients:;

[Big Al]

Dear

My Name is Attorney SAMPSON KOJO BEDIAKO I was ask to respond to your email by my boss Barrister Ali Mahmood. Our client Mr. Omar Salim have assigned our legal office to give you all necessary legal services that will help you to facilitate the release of $2,500.000.00 Dollars from GTBank to your account.

I will officially open a communication with GTBank, as soon as you comply with us to make our work very easier for us, by filling the application form which i will be sending to you. There are banking procedures we must follow when the bank acknowledges our request in other to approve the sum of $2,500.000.00 Dollars compensation fund to be transferred to your account. We will guide you all through the necessary banking procedures until GTBank approve said fund to you.

Be informed that we have the mandate of Mr. Omar Salim to work with you till the $2,500.000.00 Dollars has gone into your account we will do everything possible within our legal power to provide you our legal services till the end of this transaction.

I have attached an application form for you to fill and return to enable us submit your payment request and my working ID also that of my partner Barrister Ali Mahmood to enable you have our true identity for trust purposes. You are required to send to me a copy of your International Passport/ drivers license for official use.

Send me a message on my WhatsApp number + 233268083182

I await your response

Best regards

Barrister Ali Mahmood/ Attorney Sampson Kojo Bediako

Header:

Delivered-To:
Received: by 2002:a05:6638:c4e:b0:42b:b32f:d245 with SMTP id g14csp880115jal;
Thu, 10 Aug 2023 10:47:53 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IHFsccV18pMGkjG0N/8XFENWbAhg2XnajmuUmM4HqL/nFNRRpxebCH6Ht9oH8XFMn+t82I7
X-Received: by 2002:a17:902:cecf:b0:1bb:35b6:448f with SMTP id d15-20020a170902cecf00b001bb35b6448fmr3388655plg.15.1691689672531;
Thu, 10 Aug 2023 10:47:52 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1691689672; cv=pass;
d=google.com; s=arc-20160816;
b=fKcFA09Yg/bcnxfq+wVv79VuwyhHAGynBlIFVkApRJb508yENVZkujsG5wk0r+NlgC
TJrWiqY6kxbUjJS1txadtEK7GmbaxDXJKdFgOzRDpSYfuaSBE368fxHeDXmS6W74uvC/
lmYOAWs4llfgqKnJEKLy30ZXc6/GBwNJswcQioOTxcuQzJW21FFassU4ey2vkt3pajiP
RUP5aVgSzic7CVxMUL+A4iKzJn/cRZ6Ipy9HqjmwRg7ZDn+BSJgi0w3JlN+B8n633+OW
aLIkEWakMPiDhWX62hLT4Z/8OZvjIPLDyi8kGpgKjPScf7io44KiXO1X24yJSgNzqYDP
LMFA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:importance:mime-version:subject:references:in-reply-to
:message-id:to:from:date;
bh=DQhnJbinGuHcFQ5cKwK01GuWmLEoOlufL/UI8cmKypk=;
fh=HxXsB8vzTSPpJvTT1wNjAmldwEgeKe5l2zt9riWJ6GE=;
b=nkFf5Ur96afZoWhL1FgL3+tsG3SQrXKUGpisaTg/Fx5kbtZeXnmj3y8NUhSH4b6KYf
8y/pSXzcjjCbCduHheqhpX79SXn/52NqVIQuoBbVe5P0drl+69ZNuIXlWWKdUghQTu7R
/TyrLwQ4cO+BvlTbKq9SfcLpjJHwa5GZQwSXe+t3I1PjbOzyD28nEnh3dOW1rIbFlxdL
GqVVqXcLmsEFe4s+v8WXT6GX8H3NzUT8IlpFmdqWJUy4OlzYdvL48b9xkzactdMW8pn1
PkEsUo83XyplvOYjlGrroZtBL1cG7O880FudWTE63H4oshj+FyUo26V6AH9S56ZvQLhl
OGpA==
ARC-Authentication-Results: i=2; mx.google.com;
arc=pass (i=1 spf=pass spfdomain=barristeralimahmood.com dmarc=pass fromdomain=barristeralimahmood.com>);
spf=neutral (google.com: 136.143.188.50 is neither permitted nor denied by best guess record for domain of info@barristeralimahmood.com) smtp.mailfrom=info@barristeralimahmood.com
Return-Path: <info@barristeralimahmood.com>
Received: from sender4-of-o50.zoho.com (sender4-of-o50.zoho.com. [136.143.188.50])
by mx.google.com with ESMTPS id u4-20020a170903108400b001bd9d6e830dsi1746235pld.567.2023.08.10.10.47.52
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 10 Aug 2023 10:47:52 -0700 (PDT)
Received-SPF: neutral (google.com: 136.143.188.50 is neither permitted nor denied by best guess record for domain of info@barristeralimahmood.com) client-ip=136.143.188.50;
Authentication-Results: mx.google.com;
arc=pass (i=1 spf=pass spfdomain=barristeralimahmood.com dmarc=pass fromdomain=barristeralimahmood.com>);
spf=neutral (google.com: 136.143.188.50 is neither permitted nor denied by best guess record for domain of info@barristeralimahmood.com) smtp.mailfrom=info@barristeralimahmood.com
ARC-Seal: i=1; a=rsa-sha256; t=1691689670; cv=none; d=zohomail.com; s=zohoarc; b=eoAs1kOVnYxVBAB36qVpVt2A6+pXQXCztHcbPD9+bwHfPd8bQcpUSr5n5ribrticnO2FtSp9qmptKMNWUG1uPf7OGYh3lttGhkXduMcBkcW8/a+YT8cf/KMxy0C8UYHTL/OypHTxPDEexcPhmEfjtW1cW2eCbCFXnBdPt/1GPIo=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1691689670; h=Content-Type:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To; bh=DQhnJbinGuHcFQ5cKwK01GuWmLEoOlufL/UI8cmKypk=; b=Bv76LfemnmOEg9nyoxf645apnmOHcymQ50PqbH+xj8AVip9R9FK26dLLb/MeO6itfOoHPE0pLL0lXM0+GlGqTKFOvdmx0+7IFiLQqtAOtYUnJtfyA8SZMikPnuMYDR+ccs9AQBxrOD8LUyTEoYfb3i1pYzAU1zKUoz4T2Xd4OZ4=
ARC-Authentication-Results: i=1; mx.zohomail.com; spf=pass
smtp.mailfrom=info@barristeralimahmood.com; dmarc=pass header.from=<info@barristeralimahmood.com>
Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1691689668176594.1426902169645; Thu, 10 Aug 2023 10:47:48 -0700 (PDT)
Date: Thu, 10 Aug 2023 17:47:47 +0000
From: Ali
Mahmood Chambers <info@barristeralimahmood.com>
To: Message-Id: <189e08fccce.d6aaddc9244601.6889547190404424917@barristeralimahmood.com>
In-Reply-To: <CAAbCh5uMCtfyjm+nXNqszFR=t_DOvL0Oi04K1XCQ0kNjVJw+0Q@mail.gmail.com>
References: <CAAbCh5uMCtfyjm+nXNqszFR=t_DOvL0Oi04K1XCQ0kNjVJw+0Q@mail.gmail.com>
Subject: Dear , fill the form and send it back
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_786141_1844008978.1691689667790"
Importance: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
X-Zoho-Virus-Status: 1
X-Zoho-AV-Stamp: zmail-av-1.1.0/191.582.30

------=_Part_786141_1844008978.1691689667790
Content-Type: multipart/alternative; boundary="----=_Part_786142_399857917.1691689667790"

------=_Part_786142_399857917.1691689667790
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Orig IP: 136.143.188.50 | Orig ISP: Zoho-as | City: n/a | Country: United States







Phone: +233268083182
Number billable as mobile number
Country or destination Ghana
City or exchange location
Original network provider* Zain Communications (Ghana) Ltd

[Big Al]

Yes you can send it as email

[Big Al]

Dear,

Marital Status

date of birth

Next of kin Email, phone number , full name

zip code

WhatsApp number

Attorney Sampson Kojo

[Big Al]

GTBank PLC
Managing Director
Thomas Attah John
Email: info@gt.bgha.online
Tele +233531841519

Attn:

My name Attorney Sampson Kojo Bediako working with Barrister Ali Mahmood, I am contacting you regarding the compensation fund of our client, a total sum of $2,500.000.00 Dollars deposited with your bank, by Mr.Omar Salim. He did inform us that he has given instructions to your bank to process the transfer of $2,500.000.00 donated to XXXXX, as a compensation fund.

I want to officially apply for his compensation fund to be approved by your bank, and transferred to the beneficiary XXXXX, as an Attorney appointed to help him facilitate the whole process, and i am working with Barrister Ali Mahmood.

We humbly request that your bank will honor this request to approve his payment with immediate effect as donated by Mr. Omar Salim. We hope to hear from you, below is an application form containing his details attachment for your official use thank you.

Best regard

Barr. Ali Mahmood/Sampson Kojo Bediako

[Big Al]

Dear

Thank you for contacting GTBank We will review the beneficiary details, and the whole process be rest assured that we will get back to you, as soon as we conclude with the whole review of this compensation fund donated by Mr.Omar Salim kindly fill out the form thank you.

GTBank PLC
Email: info@gt.bgha.online
Tele +233531841519
Managing Director
Thomas Attah John

Header:

Delivered-To:
Received: by 2002:a05:6638:c4e:b0:42b:b32f:d245 with SMTP id g14csp429994jal;
Tue, 15 Aug 2023 06:41:01 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IHp8BROVcZ9RIbLbSZBLdCNxKNPdxRxWyj8OzNqa4TB8LvsNORiYgM4RvkCmj2V0iF0UEdi
X-Received: by 2002:a17:902:cec5:b0:1b4:5699:aac1 with SMTP id d5-20020a170902cec500b001b45699aac1mr2790039plg.12.1692106860777;
Tue, 15 Aug 2023 06:41:00 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1692106860; cv=pass;
d=google.com; s=arc-20160816;
b=mnzpKFgTfcpDy2et0VOd1cm9OZuvyZO1h6UE6T92pMBQNF0Cax87Fh4iMBxEjTiU8o
qmDnqymxw217Z324dayPN70KnDODidbcrWmkS2wyd8upNSTqxBCG/0WrA6ZOpPjb6kJm
0eJbnNTy3ODZpac6MjimQKZEJJc+fKFqGH0INxXkGQjaOEt3Ve545mh7ZCupx4nF0L+t
Cvn7ftAmfsBr0dJeFputCfAZhrt+/++J8odgGSe4zFOI25LXkiQVKRKmPGRO1mPQ1Sfp
FeRLIr3C8dAlOCykXXZrTuEULK+KaxGFXhp93EuIfcMzajMWY7DIy0EwVnTYASHHhB+Y
lqeA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:importance:mime-version:subject:references:in-reply-to
:message-id:to:from:date:dkim-signature;
bh=wJfb8haYS0bscK4Xf9vQk9JarIrKcSRHqtvuzQWAp/8=;
fh=cVkmqi2/FkFnrTp+sZIs/QMGQPJqYKErOKJWQtYVG4Q=;
b=bsVnkNJQLnGXblvW3tXNkkBFKeBiHS2yfTSOBLzfCqTQoyhk+z94EDpc9np76u1UnL
vXwoqt+tKu1oPIJwCgdj2dFlj3TWqngM0Gv26HjTD2b+pseSyG60PlhNIUDRq/mcec0I
cO9q4uVMsFbRr8wH/zUJljrVNPdfaDbANfU+1F4FpY8KuUdKGAb7RzOuBixAQd6sE++D
zs8OGuZ3Jmc1g0cmdQ6p9Mh2W85zF+oQHt9hYgj9g+A6c8cytvNYKCtwYjAPxPxkqfOR
dhYTy7cH9qzSsNw9yxh0xBnZ++Lw+CehCIV6kHBflmvxAOoKYKkfAtxbsJx8wF2CCYi3
P96A==
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@gt.bgha.online header.s=zmail header.b=b0QVYy81;
arc=pass (i=1 spf=pass spfdomain=gt.bgha.online dkim=pass dkdomain=gt.bgha.online dmarc=pass fromdomain=gt.bgha.online>);
spf=pass (google.com: domain of info@gt.bgha.online designates 136.143.184.59 as permitted sender) smtp.mailfrom=info@gt.bgha.online
Return-Path: <info@gt.bgha.online>
Received: from sender3-of-o59.zoho.com (sender3-of-o59.zoho.com. [136.143.184.59])
by mx.google.com with ESMTPS id i4-20020a17090332c400b001bdd1f48f91si4292871plr.564.2023.08.15.06.40.59
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 15 Aug 2023 06:40:59 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@gt.bgha.online designates 136.143.184.59 as permitted sender) client-ip=136.143.184.59;
Authentication-Results: mx.google.com;
dkim=pass header.i=@gt.bgha.online header.s=zmail header.b=b0QVYy81;
arc=pass (i=1 spf=pass spfdomain=gt.bgha.online dkim=pass dkdomain=gt.bgha.online dmarc=pass fromdomain=gt.bgha.online>);
spf=pass (google.com: domain of info@gt.bgha.online designates 136.143.184.59 as permitted sender) smtp.mailfrom=info@gt.bgha.online
ARC-Seal: i=1; a=rsa-sha256; t=1692106858; cv=none; d=zohomail.com; s=zohoarc; b=KYXat4IL3qS74M+VdEb/92gUxZ8Wact2wqp3c6aKR4OwDlEMLCCTkkt99rcK3Uch2vqAKesbWo5UniuKWT4ATUtVhRqinlK+ENz7frXNZEWK05hzbVsumFtbILXTDsmZl55i8I4ttCNI8D4DOMJzDTONuLIS/HTWHlz5k2R+1Lc=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1692106858; h=Content-Type:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To; bh=wJfb8haYS0bscK4Xf9vQk9JarIrKcSRHqtvuzQWAp/8=; b=lr18HeqjdPOHVvTgfIcpjd7ouOHwe6xRWcLu75pHJx6gDAi2O5BnycXPDQufCxR9tfosL6DlG7BGUXt9dEPWykxJjMwbIbAa3tJM3XpZSOOSG+TgVOlKCnjyekUAe/I/4SisiPpTUS/+sVVlqEzTy1fhvQGTQE+BRRZJH+P8jjE=
ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass
header.i=gt.bgha.online; spf=pass
smtp.mailfrom=info@gt.bgha.online; dmarc=pass header.from=<info@gt.bgha.online>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1692106857; s=zmail; d=gt.bgha.online; i=info@gt.bgha.online; h=Date:Date:From:From:To:To:Message-Id:Message-Id:In-Reply-To:References:Subject:Subject:MIME-Version:Content-Type:Reply-To:Cc; bh=wJfb8haYS0bscK4Xf9vQk9JarIrKcSRHqtvuzQWAp/8=; b=b0QVYy81YEY18Y+xzh/Udz4pv7odFYsR/wG61C5MdolWCH0dc2HXBwCg2292Tz9K 08il9z5PlA4Lb8pRJTwlTW/8hNzNCoH1SAuzwtNzpK3ECh6LXYdBeKmumhkoH0bJ4pq D+zEJq/3LuAAJ2ZTLre799zwboqrdLNhzbfosiUg=
Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1692106855707608.8205476208148; Tue, 15 Aug 2023 06:40:55 -0700 (PDT)
Date: Tue, 15 Aug 2023 14:40:55 +0100
From: GTB Ghana <info@gt.bgha.online>
To:
Message-Id: <189f96d932a.121081b4f760128.3063856357458152849@gt.bgha.online>
In-Reply-To: <189f8071fd4.ac9b9cea719670.3297270672721536015@barristeralimahmood.com>
References: <CAAbCh5uMCtfyjm+nXNqszFR=t_DOvL0Oi04K1XCQ0kNjVJw+0Q@mail.gmail.com> <189e08fccce.d6aaddc9244601.6889547190404424917@barristeralimahmood.com> <CAAbCh5vTzwhB5prujT6UmW35f-9Mf6KZ2zDsHSFbFh47joAVHQ@mail.gmail.com> <189e8d8547a.10370285e457499.5523466393190517722@barristeralimahmood.com> <CAAbCh5twfhdmdNpznD0RsbKhpLzBVk3cOSAs4tNOivJdS9BA_A@mail.gmail.com> <189f8071fd4.ac9b9cea719670.3297270672721536015@barristeralimahmood.com>
Subject: Re: Attn: Attah John, of GTBank
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_2420451_974841165.1692106855211"
Importance: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
X-Zoho-Virus-Status: 1
X-Zoho-AV-Stamp: zmail-av-1.1.0/191.688.65

------=_Part_2420451_974841165.1692106855211
Content-Type: multipart/alternative; boundary="----=_Part_2420452_822143773.1692106855211"

------=_Part_2420452_822143773.1692106855211
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

[firefly]

The fake bank used in scam is a spoof of Guaranty Trust Bank Ghana.

From the fake bank website:

Guaranty Trust Bank (Ghana) Limited was registered in Ghana in October 2004 and obtained its universal banking license from the Bank of Ghana on 23rd February, 2006, thereby paving the way for the commencement of operations.

Contact details:

25A, Castle Road, Ambassadorial Area, Ridge
P.M.B CT 416, Cantonments, Accra, Ghana

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=162989

From the domain name registration:

Domain name: bgha.online
Updated Date: 2023-04-06
Creation Date: 2023-03-11
Registrar Registration Expiration Date: 2024-03-11
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: Redacted for Privacy
Registrant Organization: Privacy service

This is what the fake bank website looks like:

[firefly]

Same recovery scam, another fake lawyer.

Dearest one.

I am Mr.Omar salim from Saudi Arabia. I contacted you many years back regarding my request to partner with you in moving some of the stolen funds we recovered from our corrupt politicians as part of the Anti-corruption Agency in Saudi Arabia. I contacted you that time when I was looking for a partner to move those funds out of Saudi Arabia. So that we could partner in an investment project plan in your country which didn't workout. I am happy to inform you about my success in getting those funds transferred to Lagos Nigeria where the money was accepted with the help of my new partner from United Arab Emirate, in the person of Mr. Abdul krisha. With the cooperation of his friends presently in the Nigeria Government.

I have awarded the total sum of 5,500.000.00 Dollars in your favor to appreciate your effort at that time, i remember what my father taught me when I was growing up as a young man. He told me to always show appreciation for every good thing people did for me, especially when people volunteer, and sacrifice their time to help me.

I contracted an experience lawyer in the name of Barr.Sampson Kojo Bediako, and instructed him to help you facilitate every required legal process that will be required by ECO BANK in Nigeria, to help you receive the total sum of $5,500.000.00 Dollars i awarded to you as a compensation fund for your effort that time.

Presently I am in Dubai to attend some series of investment projects meetings with my new partner. So i want to let you know that i didn't forget your past efforts, and attempts to assist me in transferring those funds despite that things didn't work out as planned, I am very glad that i was able to make it happen with the help of my new partner so kindly contact him, i have already told him about you he is waiting for your first communication with him about your compensation fund below is his email address.

Sampson Kojo Bediako LAWFIRM
EMAIL: info@barristersampsonkojobediako.com

Many thanks once again for being a good hearted person. I will always keep in touch with you, and I will be more than happy some times in future to meet with you one on one, and have a beautiful celebration with you.

Yours Faithfully
Mr. Omar salim

Header:

Received: from mailout02.t-online.de (mailout02.t-online.de. [194.25.134.17])
Date: Wed, 20 Mar 2024 20:55:41 +0100 (CET)
From: Omar salim <Helmut-xxx@t-online.de>
Reply-To: "info@barristersampsonkojobediako.com" <info@barristersampsonkojobediako.com>
To: "officemail@info.com" <officemail@info.com>
Message-ID: <1710964541158.307351.a0dae8641b6edde908938aa41c8f14aff3e48970@spica.telekom.de>
Subject: Re: Compensation fund

Originating IP: 194.25.134.17
Originating ISP: Deutsche Telekom Ag
City: Krefeld
Country of Origin: Germany

[firefly]

Reply received:

Dear xxx,

My Name is Attorney SAMPSON KOJO BEDIAKO I was ask by my client Mr. Omar Salim to help you facilitate the release of your compensation fund valued for total sum of $5,500.000.00 Dollars in ECOBANK.

I will officially open a communication with ECOBank, as soon as you comply with all the required process to enable me follow steps judiciously till the fund is being release to your account.

Note the above mentioned details required on the application form will be used to prepare the required legal Power of Attorney in your name. Because the legal Power of Attorney is the only documents that will empower you to claim the funds that is ECO BANK.

I have attached an application form for you to fill and return back to enable me open a communication with ECOBANK without wasting any time i have also attached my my working ID kindly send me a copy of your International Passport/ drivers license for official use including your WhatsApp number

Call/WhatsApp me for more information +233267185781

I await your response

Best regards

Attorney Sampson Kojo Bediako

Header:

Return-Path: <info@barristersampsonkojobediako.com>
X-Originating-Ip: [136.143.188.52]
Received-SPF: pass (domain of barristersampsonkojobediako.com designates 136.143.188.52 as permitted sender)
Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com;
dkim=pass header.i=@barristersampsonkojobediako.com header.s=zmail;
spf=pass smtp.mailfrom=barristersampsonkojobediako.com;
dmarc=pass(p=NONE,sp=NONE) header.from=barristersampsonkojobediako.com;
Received: from 136.143.188.52 (EHLO sender4-of-o52.zoho.com)
ARC-Authentication-Results: i=1; mx.zohomail.com;
dkim=pass header.i=barristersampsonkojobediako.com;
spf=pass smtp.mailfrom=info@barristersampsonkojobediako.com;
dmarc=pass header.from=<info@barristersampsonkojobediako.com>
Date: Mon, 25 Mar 2024 07:40:26 +0100
From: Samson Kojo Bediako <info@barristersampsonkojobediako.com>
Message-Id: <18e7456c192.cac3d20a1243603.1033609879587778798@barristersampsonkojobediako.com>
Subject: Re: Compensation fund, kindly fill the form and send it to me.
X-Mailer: Zoho Mail

Originating IP: 136.143.188.52
Originating ISP: Zoho-as
Country of Origin: United States

+233267185781
Number billable as mobile number
Country or destination Ghana
Original network provider* Zain Communications (Ghana) Ltd

Fake documents received with the message:

[firefly]

The fake lawyer uses the fraudulent domain name barristersampsonkojobediako.com only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166372

From the domain name registration:

Domain Name: barristersampsonkojobediako.com
Updated Date: 2024-03-06
Creation Date: 2024-02-18
Registrar Registration Expiration Date: 2025-02-18
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Reseller:

Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: Lagos
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: NG