p.abbate@go2consults.com

[Big Al]

Recovery Scam:

Hello, Did you receive my last email about your funds the amount of $10.5M which you authorize Mr. Camil Zettl to receive on your behalf?
As soon as I hear back I will work out the finer details.
Mr. Paul Abbate

Header:

Received: from 10.197.36.202
Return-Path: <p.abbate@go2consults.com>
X-Originating-Ip: [45.84.128.252]
From: Pual Abbate <p.abbate@go2consults.com>
To: Pual Abbate <p.abbate@go2consults.com>
Subject: Hello
Date: Wed, 27 Mar 2024 19:01:03 +0300
Message-ID: <1711555263.981169113@f190.i.mail.ru>
Reply-To: Pual Abbate <p.abbate@go2consults.com>

[Big Al]

Federal Bureau of Investigation Headquarters
935 Pennsylvania Avenue NW, Washington, DC 20535,
United States


Attention:



I, The Director Fund Recovery Team officially writes to acknowledged your quick response towards the claims of your payment fund and the investigation is ongoing and we have sent out signal to INTERPOL Joint Task Force to track down Mr. Camil Ezttl's and his group who changed your data's information in your payment file and get them arrested. As matter of urgency there are different accounts submitted for your payment reflection as your representatives from Austria Republic by Mr. Camil Ezttl.


Please, you are hereby required to verify the following immediately:-

1. Did you AUTHORISE one Mr. CAMIL ZETTL of Austria whose Passport Photograph is hereby attached below to claim and receive the payment on your behalf?

2. Did you sign any "Deed of Assignment" in his favor? Thereby making him the current beneficiary with the following account details:
3. Bank: AUSTRIAN ANADI BANK
4. Bank Address: Bank address: 10. Oktoberstrasse 17, 9560 Feldkirchen
5. IBAN: AT23 5200 0004 5601 3651
6. Account Name: CAMIL ZETTL

You are required as a matter of urgency to confirm the legitimacy of the above claim and kindly give us reason why you decided to affect the above Change of Account. If you are not aware of this claim, please confirm to us immediately by contacting us via email very urgently for legal action to be carried out and immediate arrest of those involved will be carried out.


Due to the long delay this payment has suffered, be rest assured that immediately these payment irregularities are cleared, you would receive your fund immediately through the certified approved payment bank from us.

Note that we are bound to recognize Mr. Camil Ezttl's claim, if you fail to promptly response/communicate to this inquiry following the Deed of Assignment he submitted to claim this payment. Make sure you get back to me as soon as possible so that the necessary action will be taking immediately without further any further delay.


Remember, due to sensitivity of this transaction and investigation , you have to keep it as secret and confidential, not to be discussed or copy our conversations to a third party for security reasons and because it will fail our investigation in other to get those who are involved arrested.


Yours In Service
Mr. Paul Abbate
Deputy Director of FBI
D.L +1 (562) 930 1551

Header:

Delivered-To:
Received: by 2002:a05:6520:4818:b0:288:c3df:98f8 with SMTP id eo24csp907496lkb;
Thu, 28 Mar 2024 03:31:55 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IF6Nr4zk+W/JMV2GAMoqKzzBLdyYiXNmYLF30o5avTa4yTMgxx+sWbJWA1qdFejvQFkgDQJ
X-Received: by 2002:a05:6a20:3946:b0:1a3:c4f7:335f with SMTP id r6-20020a056a20394600b001a3c4f7335fmr2975800pzg.24.1711621914962;
Thu, 28 Mar 2024 03:31:54 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1711621914; cv=pass;
d=google.com; s=arc-20160816;
b=WSZZn2ZJNtWXVO1o8JfTaUpAp+2hgTCCg+3OQyiROjzzBtaPzPGfhg2OmNgm224FpS
Dy5qe6eqOO6NNtS0JgQUn12fHR25EdJ6KfAvFlN2KBr1FPYDi4JGVjYXAdwHWNRje+zU
/MGtYAuVg4MlKu7aPLs9UGWHtm8tpTr6lY0SprvNlw/sqaCzxFEFsvL7sHrW0P5+1h4v
qtXQIAnp4bLPom1zqtXwned0rjpszbx4nzebDHKcW4bGYCbejHjFFVyQ+fu4RI9ovW+1
a8bZULDw5rYrmrl4mYiPWwJKHrnrnsAb1D8weaHrYvaYZQd6HtQ+T6QSSB+d8F4aJ/6G
TYzw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:importance:mime-version:subject:references:in-reply-to
:message-id:cc:to:from:date:dkim-signature;
bh=NVfQoeU+eI5YT+f6IBfq54AssSX2oxusAmli47sIb7Y=;
fh=jilY8Si6mds/VSvmcz3fCld+anSg8+vKfKBz5lyU/7w=;
b=LjhiwizPwJaA90KKqqaqbIEqRfnIkhwYMRcTeKm2q214GGKYcSLF+VCcBnXLzK5QCz
kvma8tvlW5TCorncgG7Ywyqf/fMvDf0Zn7pSfStSQQ9XN2cbM1gfoO43rVt6PXIvWe1d
HjwXN+tbqiXbXPtp/GDAAhVDZoyDaNzTv/0tXm/pcGL8aNUPuL9J0HKITNrghvj4/+vT
p/thqderL+3Spc1a0Wmn/dk3+lz96/yhWYJxVZq/io4XBUE7F9s9MNz9iLdA56fLs/+a
YV328WQX85pqKShT3te0g5cLafbW3k9rCMZHuWzLwi5KLcdY91LPDPmBvrkzeEt4Uj88
MoMw==;
dara=google.com
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@go2consults.com header.s=zmail header.b=ZPsKJDvA;
arc=pass (i=1 spf=pass spfdomain=go2consults.com dkim=pass dkdomain=go2consults.com dmarc=pass fromdomain=go2consults.com>);
spf=softfail (google.com: domain of transitioning p.abbate@go2consults.com does not designate 136.143.188.52 as permitted sender) smtp.mailfrom=p.abbate@go2consults.com
Return-Path: <p.abbate@go2consults.com>
Received: from sender4-of-o52.zoho.com (sender4-of-o52.zoho.com. [136.143.188.52])
by mx.google.com with ESMTPS id v186-20020a632fc3000000b005df43caee00si1181995pgv.318.2024.03.28.03.31.54
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 28 Mar 2024 03:31:54 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning p.abbate@go2consults.com does not designate 136.143.188.52 as permitted sender) client-ip=136.143.188.52;
Authentication-Results: mx.google.com;
dkim=pass header.i=@go2consults.com header.s=zmail header.b=ZPsKJDvA;
arc=pass (i=1 spf=pass spfdomain=go2consults.com dkim=pass dkdomain=go2consults.com dmarc=pass fromdomain=go2consults.com>);
spf=softfail (google.com: domain of transitioning p.abbate@go2consults.com does not designate 136.143.188.52 as permitted sender) smtp.mailfrom=p.abbate@go2consults.com
ARC-Seal: i=1; a=rsa-sha256; t=1711621912; cv=none; d=zohomail.com; s=zohoarc; b=NSutxdpIcRxFAhoM12SdqZgN+jKXQjOgSviPToOSKc0AAc9CDFUVxCm9zzfWNKtgwFHKQU9EtSZAo4dusb94R1ykOIYV49ViEW6/F+zMMWOb/z1+harYjw4uwrxcvYr4uj/ZGA0+lfoV4Q6U/d5qGtYCIqJR/9xdqu+7uuOXQ0M=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1711621912; h=Content-Type:Cc:Cc:Date:Date:From:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To; bh=NVfQoeU+eI5YT+f6IBfq54AssSX2oxusAmli47sIb7Y=; b=ChKEAGX0UrP6JYEYlkATo5uTSPrCgPrUvQDv4WcAvW0UjbjmdiR+fYEimNvMdRh8eoK6hVH9/Wc7t6Cr/Wru/wrJ/ic8c2PHS1QnBP2t2Q9hS6rwx8DhbkC+C+CBS7Ap+p2Y96Mc88TGxDTmEFZXn0kR0IaCNnLGHGfT12LDKfA=
ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass
header.i=go2consults.com; spf=pass
smtp.mailfrom=p.abbate@go2consults.com; dmarc=pass header.from=<p.abbate@go2consults.com>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1711621912; s=zmail; d=go2consults.com; i=p.abbate@go2consults.com; h=Date:Date:From:From:To:To:Cc:Cc:Message-Id:Message-Id:In-Reply-To:References:Subject:Subject:MIME-Version:Content-Type:Reply-To; bh=NVfQoeU+eI5YT+f6IBfq54AssSX2oxusAmli47sIb7Y=; b=ZPsKJDvAhx8BV/SdEWOZmLKjN+FwCeyhbyd9GA3td9ehP7983A9BDoT2XdH05okl HUXfLUiSNuwK73rwPFF6DJ0LHUsyvYEWMw8FsU+t0AwhyuZ7nxNOk/zS1El+H190FEq fiDMaqF8WIHezYzI4aeQniHxZ+IAxdtVH8jTgTVk=
Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1711621910573264.8885768657773; Thu, 28 Mar 2024 03:31:50 -0700 (PDT)
Date: Thu, 28 Mar 2024 11:31:50 +0100
From: Paul Abbate <p.abbate@go2consults.com>
To:
Cc:
Message-Id: <18e849dafe0.ff0b22c51707079.6413134580915791892@go2consults.com>
In-Reply-To: <CA+amEBLTzjhjZBGKZPoD4hkezZoOKd5Y2kC6AZawyWMyObFTFQ@mail.gmail.com>
References: <CA+amEBLTzjhjZBGKZPoD4hkezZoOKd5Y2kC6AZawyWMyObFTFQ@mail.gmail.com>
Subject: RE: DID YOU AUTHORIZE CAMIL TO OBTAIN YOUR FUND?
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_5447847_997850867.1711621910497"
Importance: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail

------=_Part_5447847_997850867.1711621910497
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Phone: +15629301551
Number billable as geographic number
Country or destination United States
City or exchange location Alamitos, CA
Original network provider* Frontier California Inc.

[Big Al]

Federal Bureau of Investigation Headquarters
935 Pennsylvania Avenue NW, Washington, DC 20535,
United States


Attention:
Code: ( )


I, The Director Fund Recovery Team officially writes to acknowledged your quick response towards the claims of your payment fund and the investigation is ongoing and we have sent out signal to INTERPOL joint task force to track down Mr. Camil Ezttl's and his group who changed your data's information in your payment file and get them arrested.


After an executive crucial close door meeting today in conjunction with the Federal Reserve System Board of Director Chairman , And Management of the US-Bank, it was resolved and agreed that the US-BANK will work extensively to ensure that your payment fund of US$10,500,000.00 will be settled without any hassle.


You are requested to contact the US-Bank by furnish them with the required data's needed bellow and forward it to the bank via email address bellow, which will enable them to start the payment approval process and account opening on your name.


1. Your Full Name:
2. Address:
3. Telephone Numbers:
4: Identification ID:


Please you are advise to contact (Mrs. Reza Jessica Renee) immediately with the completed above data's and forward it to the bellow email address .


Email: info@us-bankgroup.com
Contact Person: Mrs. Reza Jessica Renee
Tel: +1 (612) 399 9939


Due to the long delay this payment has suffered, be rest assured that immediately these payment irregularities are cleared, you would receive your fund immediately through the certified approved payment bank..


Note, That we are bound to recognize Mr. Camil Zettl's claim, if you fail to promptly response/communicate to this inquiry following the Authorization note he submitted to claim this payment.


Make sure you get back to me as soon as possible once you have made the contact to the US-Bank with the above email address so that the necessary action will be taking immediately without further any further delay to track down Mr. Camil Zettl and bring him to justices.


Yours In Service
Mr. Paul Abbate
Director Fund Recovery Team
D.L +1 562 930 1551

Phone: +16123999939
Number billable as geographic number
Country or destination United States
City or exchange location Twin Cities, MN
Original network provider* Qwest Corporation

[Big Al]

US-BANK FOREIGN REMITTANCE DEPARTMENT
PAYMENT AND INTERNATIONAL SERVICES
INTERNATIONAL PRIVATE BANKING
800 NICOLLET MALL MINNEAPOLIS MN 55402.


From the Desk of: Mrs. Reza Jessica Renee
Chief Executive Officer
US Bank & Co



Attention:
Code:


I, Mrs. Reza Jessica Renee officially writes to acknowledged your email message toward the claims of your payment fund, And is not quite long we received a detailed payment instruction from the Foreign payment Allocation of International Monetary Fund (IMF)/ Federal Reserve System and Deputy Director of FBI (Mr. Paul Abbate) to process the transfer Sum of US$10,500,000.00 (Ten Million Five Hundred Thousand United State Dollars Only) in your favour. Necessary documents regulation Act Paragraph 31 section 6a.



We have being approved by the US-Bank Foreign Exchange Executive Directors to open USD$ Dollars Noon-Residential Bank Account on your behalf with us which is in line with the Ethics and Rules the Federal Reserve System (United States Of America Mother Bank). Once we are done with the account opening, your fund will be deposited into the new account and online bank access of the account will given to you which will enable you to be in charge of your fund.



To that effect, you are hereby expected to provide us with a copy of your identification ID and also complete the bellow forms with your personal details to the best of your knowledge to enable us process opening of the account on your behalf with us and deposit your fund into the account.


Beneficiary Full Name:
Beneficiary Address:
Beneficiary Direct Cell Phone Number:
Name of Next of Kin:
Identification ID:



Note: Once the above information has being confirmed, we shall open account on your behalf in the next 72 hours and provide you with the online account access which will enable you to use and make transfer to any account of your choice or apply for ATM Card through the online bank account.


Finally, We shall be looking forwarded to hearing from you to enable us serve you better and if you have any question do not hesitate to contact me through the email and below number for clarification. Attached is a copy of my Identification ID, my reasons of sending it to you is for the legitimacy of this transaction.


Tel +1 612 399 9939


For and on Behalf of ,
US Bank & Co
Mrs. Reza Jessica Renee.
Head, International Financial Controller

Header:

Delivered-To:
Received: by 2002:aa6:c382:0:b0:28c:9da2:6ab5 with SMTP id q2csp573089lkp;
Tue, 2 Apr 2024 05:11:14 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IGoL06AZOjh41RTsLAhls2SAzCzxTXSHYWMoj6szvmIJq418luwP9NIS/b4DJBbGdEPbgVQ
X-Received: by 2002:a05:6102:32cb:b0:478:95c8:e458 with SMTP id o11-20020a05610232cb00b0047895c8e458mr121767vss.18.1712059874273;
Tue, 02 Apr 2024 05:11:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1712059874; cv=none;
d=google.com; s=arc-20160816;
b=KX2strp0Og/eeqsaTUTFXr3DXfS/pDQXT6WcaWd5yQFzLe8msMKjYiEWMKks3pa+d4
h6+FbkLkDnEFru64KoWNQHwl/fhSgq2obKsqmMyvKRN4blHzxDZPgNNoaLFhZ09A2n8m
E0o3O46CjQFKWv7cmaqnwMSVgj9gCNP+gkOSrozQ0Yh0P9mN1gTJuCZhxjE3KmljA+vr
VmZfcePhX9TW8uzn5ved1QIjwx2Mhvz/c1WkYSRyKuCX+hSSBj+7WOIFJ/WRsnMIojOC
AridR/MdMHIGobVNjJz3N4PSOAwe3ZyRBn3yaevu73bUAwkYrYXGfT513z3todwMeZTN
zzDg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=references:mime-version:subject:message-id:cc:to:from:date
:dkim-signature;
bh=QbzhKeCU//xCfysQusESTWJY9tavcGRrwarQx1OM3tw=;
fh=27OnDOnvhmz4lcEPRgjlEEa5Fu+dtw0pSs9XhzMzgYU=;
b=Jc3HmXH89147HrS1xSLauk617j1isuVGfqQRHmrvmopaSlwfGAu3IJll+q4ZzDd5mB
Ne11jdtoQnIW8ruukOjygvpK4k2ldvnZoAg1FTcn+p3Bw+/pE14kcpi2cO7i9U1u+6mO
ySPNHsogkjwHuukwOSP6hWakMxAUOiEMqwFrtQ/7VmUNMbvAQEifGl8JzdDgEsXNwpl8
7g34XsWb91VXjAH39RgNIJVYfZpZ2o122qAqZxSPb4lNLvq87Y/uOHuLDZjAeqbWWzCI
M6HgL1QVzHjblodSEOwerDGzfWI9xCNrHNtBK/BvzXksTza6Bzd40PqY2rik0xinx5mo
VYQQ==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@yahoo.com header.s=s2048 header.b=jZ1gtL1X;
spf=neutral (google.com: 66.163.186.204 is neither permitted nor denied by domain of info@us-bankgroup.com) smtp.mailfrom=info@us-bankgroup.com
Return-Path: <info@us-bankgroup.com>
Received: from sonic310-23.consmr.mail.ne1.yahoo.com (sonic310-23.consmr.mail.ne1.yahoo.com. [66.163.186.204])
by mx.google.com with ESMTPS id m9-20020a67bb09000000b00478665b22cbsi622647vsn.392.2024.04.02.05.11.13
for < >
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Tue, 02 Apr 2024 05:11:14 -0700 (PDT)
Received-SPF: neutral (google.com: 66.163.186.204 is neither permitted nor denied by domain of info@us-bankgroup.com) client-ip=66.163.186.204;
Authentication-Results: mx.google.com;
dkim=pass header.i=@yahoo.com header.s=s2048 header.b=jZ1gtL1X;
spf=neutral (google.com: 66.163.186.204 is neither permitted nor denied by domain of info@us-bankgroup.com) smtp.mailfrom=info@us-bankgroup.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1712059873; bh=QbzhKeCU//xCfysQusESTWJY9tavcGRrwarQx1OM3tw=; h=Date:From:To:Cc:Subject:References:From:Subject:Reply-To; b=jZ1gtL1XAb12LWCmr+AAp1gAKZHrAFc8uTa62pHHDs5CLAcGKs2z+XWDVshWZ1OzdrUtoL/RcAEqPF8GOezdZX60DaOKv4vrj0fRNZORI7QL7a57RKd+oKtAZe+E01Aq74cwJSB/P9z/nquSaRkl0TOLAH7KDFbFjfq7grLr4fsKQL2PTnsfRl4uJnV3gOw0wPxkiGA/mEJn0+qVO9lEwB0JcPtTHTQYAeoZ/3h3kvt8OvXhyb+lbb0Xia6icRYeOZHh9f+2ITKeHQatiHQzpttHx03p2i9flsn6+oUtUltVdIFNe5Bmf1CNWqvt2l/vxiTSTlGU29lU5acxT27dYw==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1712059873; bh=qgY6RegE/F4nGfrbtXmmpYD26lrlXkM2qu/bNHS9xxL=; h=X-Sonic-MF:Date:From:To:Subject:From:Subject; b=kdjJ/t0gzbhgL8Kcf4c/PE18tXOxnsZafxw2UQOqmb46dO9ul7MR9TqIzwbm7TOoWf3lPOXrUGf+WN2ky0xI3kJK1jxjMd3Qp0Tf7VGcGMwtbxBZrAeuXzFkxPZ1L49wi0Bg9MAqMfYnfvXChm9/W6Au7qD2nowYDyH+5pzihxiCaUP4VNpFK/gP+jhPkPYAJ1zvNNQKbTc9GooLADaAE3K7j92rMY/GALeOV8cCQxoLUKmIUh5N+2HHXz8cZyeC5UtQzw97MWEtZDy/gyCJFyPL/PezQclgI+vcVWlkhNrodIiPpqcBtd2AB+MPcRioCVBfbaq2lP2E55EJbQRdSw==
X-YMail-OSG: M60lVHMVM1k6tHxO37e.NbeZy2maL6LjA_rZ0q.2LnozknB_6TRTj2qGCIXG9i8 j.k1_qgmR4wrMBq9Ftyn0NjlkWYjU8LVYVPCivraqHzWoNmVhkhY7SIh4mDhAdsjOv0p_W7Vy9xK 32dKx1B5F5K67pggF3.sEF5.aOnWtgl1KNYtwfX2YGP1j4jGszyl5dJGIrbvJk0Si3TBDJvjNpBU FBXZ.G.HR1r5fEzh_TXGACZaIMWe8hzxMVKlMg70Iz6hpWMEfzYr3CiS5G65W5ht9fiMZcT3rqKX 8xz0zbuUdMAxMAxlMTiB944t_IoyZBbth0VOU9kxV6RLJDqxI_SNQyvzi05e7yDyih4w.9T8HNnW Isz1BdW3YNLWiP.hReTWo39xORXIJ6Au6N_buUtd5Jo1yMfL6iUt1OJ3b9aHpV9W06o7CX5M3Fco 9dDy7abC.bszoazx.CRwQNGjLjPL7qTolCbe.TSY24WsuEIFlLnVbRP4czGk1mzznM9cgobfHPZx IENJaFBFlnEt1AU60YHU39UONOXWc1_YrLaLtD9IlVrIUHlD2BSMViw5OKrYYbtJl6Nx.XdcT37l 1A7.NkEyqCtvzT6V64ZJoh5HXjLsUKPTH_GqoH7WSh275oClKaYu6UdXcrfjAHhnNyePDHkfD6gu g3gUjyxY8G9O1Tm2Nqt62j8loVyRzxsdgBsMsJNzxslhaxDszThQqywJxdOv0uZhEvC7k4j.AC.n P6KXeHFtvI1CjyB0FZnh5NQwVnlAHIzrvJ1YG3meJUv8FCk23Gvad1LAyNRORStdn41o60yM.Hwx ob8D01N9nVWi_LAcXrrDy.T3U6jxkM236aFI8L1XX6zVWOSxwPgoiKiBlJRlq9AG7vetlfK3U2d_ j7rQbqA8AZ2RYcckVuGQXNvzhuwM5ZY1kFzHJNkMZeiwg8t2iFjpUhGAYlOVRyRoUbgXH0fb4FTD P8NouxddDM3RpDmAu7ZBcONA5eM2nyXdxvSEKK4z6BLgceTzMK3FFmn4PKGTiQyMb.1Q.Aq6GitT 78P1EY0teTFDfTpDmbbWCpduEOO5Jn32ZZxFwRtlsZIQJsFZSbIuZCmuK49BsSKMjaDtfRhhVsoX 2uGvPMN8XXb.KlAbsO9n2a.kxUKfwFlTXUCtE5If.twoIiN9oz7KmqhwVReY0fdvpQ1qPeauTY6L 3aoABn5kQw3CRgvnDGazFdnwWFjmmp7VbMu3J_wrAV22o4BuewuXEpJBo4gR3bcqN5uXuxssXxph RZyXzgiN1RI476E6Lhh9nIHHVCWU3rdR2aZgyty3tmQYrfEb8NJLSUEMMfOcAmerFpNC1AMTkc7c 8kSG20ibgP1FT3OWvYcGi9dH7BjMPII4FBAK8XtCNWbftJMLqSaQtLvRgF71eK77Ted7YVazpteW Ja.r9M66UuVyowNLAaMXIqOve19oS2lhi2IeaUIJRtV4Ue1YQX__14tu2HL7pxVrBaoqTeTBkYNW NhuP55wIli7S7cwZkcP247722ovH6oedpO3WXSuk3BUdK6aN8J3_X99fI8Dg.HYcGWJamIR5v8NY NsEwD7KYC9osL912BS02tltCYdJQN0GvBPW4Unf1TIT4EUbJysOTDN.GK6.L2n2QExlK7M1b5RwY mknYG3b24GaeQ9ot0sWQpsrusr4PEO0m0xIs1Pla9hfY76czwmuZl37ldLQ9ZqFkTf_1kHdxUMC1 U3_UU.I0ew2qWd.3_KhSiTikbOo6zofTUJB9nQYwavRYflYZNIKqj.sNaMkAGRdnJrJneFLFjkD. mqazFb2iQIAri0c2_DhbptkhmZGWWUoNPpweXmgD1x4eLq1cfMoX8bZNgUHMEC04vwWEKtQijS8g h269O.oAoUV7ig1x7hWRi5HsKB6Is3yxIS6tSjEj3ALgidrR_xnNpBZXmbgDmSpQuFrPYfjU4R_H bPpVr4Q3.WyyS.2SdUjZR5UqkyP78g9kXg0v2dLoTyHdWwoPKGuNJ1WPA0SBU7wOg_dAkUu8MeMb 3h9CLuAyGlAM3exQYtVgXUG_3Gi3sMux9d5LtvT9gbnhtPdKiippbGsTA98l93Uej5D.KQXtt1je OORABDY7zvVrdLLLFn.cNmueK6g3qXKAcCdRHmsXowjfz7Z8dzEx6o6ZOsf6Fl3k-
X-Sonic-MF: <info@us-bankgroup.com>
X-Sonic-ID: 56383ff9-c86c-46f4-94e7-49a845cc5f3e
Received: from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.ne1.yahoo.com with HTTP; Tue, 2 Apr 2024 12:11:13 +0000
Date: Tue, 2 Apr 2024 12:11:11 +0000 (UTC)
From: US Bank Group <info@us-bankgroup.com>
To:
Cc:
Message-ID: <990942362.4527856.1712059871635@mail.yahoo.com>
Subject: RE: YOUR PAYMENT FUND FROM US-BANK TO XXXXXX S. BUSCH (2345)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_4527855_22956474.1712059871634"
References: <990942362.4527856.1712059871635.ref@mail.yahoo.com>
X-Mailer: WebService/1.1.22205 YMailNorrin
Content-Length: 6296

------=_Part_4527855_22956474.1712059871634
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Phone: +16123999939
Number billable as geographic number
Country or destination United States
City or exchange location Twin Cities, MN
Original network provider* Qwest Corporation

[Big Al]

US-BANK FOREIGN REMITTANCE DEPARTMENT
PAYMENT AND INTERNATIONAL SERVICES
INTERNATIONAL PRIVATE BANKING
800 NICOLLET MALL MINNEAPOLIS MN 55402.

From the Desk of: Mrs. Reza Jessica Renee
Chief Executive Officer
US Bank & Co

Attention:
Code:

We, The US-Bank International Foreign Exchange InterSwitch Executive Unit officially certify that, have certified the requirement to receive the sum of ($10,500,000.00) United States Dollars from our InterSwitch / International Monetary Fund InterSwitch ATM Department. We do hope that without hesitation we are certified with him that the said funds is not for crime practice.

Furthermore , The Executive Governing Board Committee went instructed us to open a Foreign Exchange Account on your behalf with the Federal Reserve Bank which is in line with the banking ethics and rules before the International Bank Gold ATM Card will be issued to you. Having completed all the final process, The Director Monetary Fund Unit of FBI have issued an approval notified to proceed with the process of ATM Card Delivery of the said amount in favor of XXXXX.

In-line with the Executive Governing Board Meeting today in conjunction with The (IMF) InterSwitch ATM Unit have issued an Irrevocable Guarantee to deliver your International ATM Black Card to your home address through the DHL Delivery Company, The withdrawal daily limit of the Special International ATM Gold Card is US$100,000.00 per day and US$500,000.00 for ATM Transfer to any account of your choice per day..

You are instructed to pay for the InterSwitch Taxation/Marginal Clearance Fee of $2800 which will enable the final approval to be issued on your behalf , immediately the payment is made the DHL Delivering Company will report to our office to pick up the ATM card and deliver to your doorstep within 48 hours.

The beneficiary is hereby advice to follow every instruction given to you this day which will enable you to confirm his ATM card on or before the mandate, failure to do so, the fund will be confiscated.

Tel +1 202 670-0178

For and on Behalf of ,
US Bank & Co
Mrs. Reza Jessica Renee.
Head, International Financial Controller

Phone: +12026700178
Number billable as geographic number
Country or destination United States
City or exchange location Westchester, DC
Original network provider* Bandwidth.com Clec, Llc - Dc

[Big Al]

Attention:
Code:


I, Mrs. Reza Jessica Renee officially writes to inform you that your email message has being acknowledged and well noted.


You are advsie to use the marginal/logistics taxsation account protocol officer information to make the payment via bank to bank transfer.

Bank Name : BANK OF AMERICA
Bank Address : 3334 N. 16th Street Phoenix, AZ 85016.
Wire Routing Number: 026009593 .
Electronic Numer: 122101706.
Account Number: 45705057XXXX
Swift Code: BOFAUS3NXXX
Account Name: B. S. H.
Account Holders Address: Phoenix, AZ 85034.


Noted, You are advsie to make the payment to the approved accountant information above and send the proof of payment receipt to us on or before Monday next week April 08TH, 2024, Faluire to meet up with the payment your fund will be confiscate.

We shall be looking forward to hear from you soon.

Tel: +1 612 399 9939

Yours In Service
Mrs. Reza Jessica Renee.
US-Bank Management.

Phone: +16123999939
Number billable as geographic number
Country or destination United States
City or exchange location Twin Cities, MN
Original network provider* Qwest Corporation

[Big Al]

Attention:
Code:

I, Mrs. Reza Jessica Renee officially writes to acknowledged your email message which is well noted.


Nevertheless, Your International Gold ATM Vard has being approved by the International Monetary Fund and Federal Reserve System and is ready in my office. The DHL Delivery Company arrived yesterday to pick up your package for delivery but you fail to make the marginal/logistics clerance fee.


Secondly, The shipment of this Approved Gold ATM Card cannot be delivered to your home address without the Swift Telegraphic Unit Director speaking with you for reconfirmation of your home address to avoid wrong delivering because the ATM Card is fund. You are advsie to provide to us your direct cell phone number and make sure you will pick up when the below telephone number called.


You are advsie to use the below remitance account to make the payment on or before the end of today, Faluire to make this payment today will lead this fund to be confiscate.


Bank Name: PNC
Account Name - E. A.
Account Number : 557802XXXX
Routine Number - 054000030
Swift Code - PNCCUS33
Account Name Home Address: Cary NC 27513


We shall be looking forward to hear from you once the payment is made and send the proof of the payment receipt immediately.


Tel: +1 202 670 0178

Yours In Service
Mrs. Reza Jessica Renee.
US-Bank Management.

Phone: +12026700178
Number billable as geographic number
Country or destination United States
City or exchange location Westchester, DC
Original network provider* Bandwidth.com Clec, Llc - Dc

[firefly]

The fake site used in scam is a spoof of the Federal Bureau of Investigation.

The fraudulent domain name shows no content and is used only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166646

From the domain name registration:

Domain Name: GO2CONSULTS.COM
Updated Date: 2024-03-23
Creation Date: 2024-03-23
Registrar Registration Expiration Date: 2025-03-23
Registrar: NetEarth One, Inc.

Registry Registrant ID: Not Available From Registry
Registrant Name: mary mark
Registrant Street: Omolade Aluko St St.
Registrant City: isolo
Registrant State/Province: lagos
Registrant Postal Code: 100263
Registrant Country: NG
Registrant Phone: +234.8080418430
Registrant Email: officexecutive01@gmail.com

The fake maker pretending to be "mary mark" while using the email address officexecutive01@gmail.com was previously reported on our forum here: viewtopic.php?f=6&t=105837 with investeinto.com, another fraudulent domain name used only for the email address while impersonating the same FBI.

Other fraudulent domain names likely used in a similar fashion by the same faker maker are:

1n2consults.com - registered the same day, March 23
1n2gt.com - registered a day later, March 24
federalius.net - registered March 12
goodsdistribs.com - registered March 26.

[firefly]

A second fraudulent domain name used in this scam only for the email address impersonates US Bank.

The scammers asking victims for identity documents copies have their identity hidden under the privacy protection given by the Registrar.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166647

From the domain name registration:

Domain Name: us-bankgroup.com
Updated Date: 2023-06-06
Creation Date: 2023-06-06
Registrar Registration Expiration Date: 2024-06-06
Registrar: Moniker Online Services LLC

Domain Status: ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Moniker Privacy Services
Registrant Organization: Moniker Privacy Services