Scammers pretending to be MacKenzie Scott

[Wayne]

CONGRATULATIONS

Miss MacKenzie Scott. Tuttle <jenlarr079@gmail.com>
Reply-To: mackenzietuttle440@gmail.com

Bcc:

Fri, 28 Jan at 15:53

CONGRATULATIONS ,

My name is MacKenzie Scott Tuttle, I am an American novelist and
philanthropist, the former wife of Amazon founder Jeff Bezos, who
later became the founder and CEO of Amazon. I believe strongly in
“giving while living”. My philosophy about life is that you should use
your wealth to help people and I have decided to secretly give
US$1,500,000.00USD to randomly selected individuals worldwide.

On receipt of this email, you should count yourself as the lucky
individual. Your email address was chosen online while searching at
random.
Kindly get back to me at your earliest convenience, so i know your
email address is valid.

Visit the web page to know more about me:
https:/ /en.wikipedia.org/wiki/MacKenzie_Bezos

Regards,
Miss MacKenzie Scott. Tuttle

[Big Al]

Thank you for confirming the validity of your email address and also accepting this grant, My foundation (Atlantic Philanthropies) technically is responsible for awarding grant / donation but I have always wanted to make a personal donation to random individuals in any part of the world and that is why I have decided to give [$US$1,500,000.00USD to you secretly without my foundation being aware. It gives me great joy finally being able to make this donation to you, let's make the world a better place by giving and solving each others problem, all people have the right to opportunity, equity and dignity to facilitate the disbursement process of the funds valued at One Million Five Hundred Thousand United States Dollars [US$1,500,000.00USD] which have been donated solely to you, please send me the below information before proceeding with remitting the sum of One Million Five Hundred Thousand United States Dollars [US$1,500,000.00USD] to you. I am hoping that you will be able to use the money wisely and Judiciously. I ask you to do what you can to alleviate the level of Poverty in your region and also try to enhance the standard of living Of as many people as you can and see the joy and happiness of giving.

Do make sure you provide me with your complete information below so I Forward it to my selected payout bank for disbursement.

Full Name:
Contact Address:
Country:
Occupation:
Mobile Number:
Age / Sex:

I am trusting you to make good use of this money.

Thank you for accepting this offer, I am indeed grateful. I anticipate
Your earliest response.

Regards,
Miss MacKenzie Scott. Tuttle

Header:

Return-Path: <mackenzietuttle440@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
From: MacKenzie Tuttle <mackenzietuttle440@gmail.com>
Date: Sat, 29 Jan 2022 02:25:53 -0800
Message-ID: <CAJoePQLLPr1ncDKb=P_DCqCtZ1gdoaJm81g=RUwH8oJLLiKXjQ@mail.gmail.com>
Subject: Re: CONGRATULATIONS

[Big Al]

This is to acknowledge the receipt of your details and to confirm
your reliability in this donation. I have decided to use my bank in
New York, Republic of the United States to disburse this money. Therefore, I

have issued out a bank draft of [US$1,500,000.00] in your name
through my attorney, which has been sent for deposit with my bank in
New York, Republic of the United States (JPMorgan Chase Bank Plc), the Bank is authorized
to conclude the disbursement of the funds via Wire Transfer to any
bank account of your choice.

You are hereby advised to keep this donation strictly confidential
until your claim has been fully recovered before you can share the
good news. Kindly contact the bank for instructions of the wire
transfer. Find below the contact information of my bank in New York
Republic of the United States.

Bank Name:JPMorgan Chase Bank Plc
Contact Person: Mr. Jamie Dimon, Regional Director
Email: info@chaseremittancegroup.online
Phone Number:+1 315 690 4074

Please note that upon your contact with Mr. Jamie Dimon, you are to
provide him with your Full Name so he can verify you with information
sent to him already. Please endeavor to keep me fully informed on all
developments with the bank so that I can also monitor the transfer
process through feedback from you.
Your full cooperation is highly anticipated. Congratulations and happy
celebration.

Best Regards,

Miss MacKenzie Scott. Tuttle

Phone Number: +13156904074
Number billable as mobile number
Country or destination United States
City or exchange location Newark, NY
Original network provider* Sprint Spectrum L.p.

[Big Al]

3801 Nebraska Ave NW, NEW YORK CITY
$1,500.000.00 USD Payment notification from Chase Bank Of New York City (CBY).

Dear Esteemed Customer


Welcome to JPmorgan Chase Bank Plc, we are a socially responsible
organization, providing banking and membership services to
individuals, companies, trade unions, charities, credit unions and
membership organization sectors. We listen to and understand what our
customers want and have developed a service which offers a wide range
of benefits.

At JPmorgan Chase Bank Plc, our aim is to make a real difference to
people's lives. Your privacy is of utmost importance to us, we take
many steps to protect your information ranging from secured networks
designed to prevent unauthorized activity through to advanced use of
encryption technology. We spend time getting to know your
organization; gaining a thorough understanding of your needs, aims and
plans for the future. Only then can we work closely with you, ensuring
that you enjoy all the support and assistance you need - every step of
the way.

One of our key objectives is to provide value for money banking for
all of our customers. That means delivering a wide range of services
that can be tailored to your exact needs, including the smooth
transfer of your banking to JPmorgan Chase Bank Plc, your details
have been forwarded to us earlier by the Foundation declaring you as a
beneficiary to receive the total sum of $1,500.000.00 USD (One Million
Five Hundred Thousand United States Dollars) through our online banking.

We have noted your confirmation message to set-up a Non-Resident
Account with JPmorgan Chase Bank Plc and below are the account
features and Eligible Criteria to open the account:

** This account can be open single
* * 6% interest rate per annual
* * No minimum withdrawal fee
* * Withdrawal is limited to $150,000 USD daily
** Your Full Name.................
** Your Address..........
** Your Direct Mobile Phone........
** Your Occupation....
** Your Next Of Kin Names.......
** Your Date Of Birth.
** Your Sex......
** Account Initial Opening Deposit Of US$400
** A valid and current Copy of your Identification (if any) passport
or other acceptable ID (the page with photo and signature)

For International transaction, we accept our Account Initial Opening
Deposit Of US$400 through Bitcoin or gift cards to speed the process
of international orders,

You must meet with the above stated requirements for your account to
be set up and activated. As soon as your account set-up is completed
and activated you would be issued your Online account Log in details
which ensures your 24 hours direct and secure Online access to your
bank account, your fund will be available for withdrawal within 48
hours upon receipt of the above-mentioned details. Note: Your total
funds have been gazetted and insured to guide against any form of
embezzlement on the funds by some unscrupulous elements. Due to this
precautionary measure taken by the Foundation, no deduction or
addition could be made on the funds, as it has a gazetted instruction
to be paid in full.

Thanks for choosing to bank with us.

Yours Faithfully,
CEO:Jamie Dimon
The President and CEO

Header:

Delivered-To:
Received: by 2002:a05:6520:2046:b0:194:3e27:4bd2 with SMTP id w6csp8319lkm;
Mon, 31 Jan 2022 02:20:48 -0800 (PST)
X-Google-Smtp-Source: ABdhPJzPiaJWLZRlq1m5aTBImouWywVUs2xvibdDBjL598VAocR7NBYraqwizJzej9D2mbcfcmpC
X-Received: by 2002:a17:907:6d81:: with SMTP id sb1mr13324596ejc.633.1643624448296;
Mon, 31 Jan 2022 02:20:48 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1643624448; cv=none;
d=google.com; s=arc-20160816;
b=Lb+eKUdiK+tIRP7X/un70E+ivCVy8VeZ6D32FBvwLLf3ihBGzWoi2NoIH2C8otKapz
NiKkkveXZQJQKdISKrlry34Y7TsINpYuEBzIU8Qv9ClWaZM6hK8X0uWDcdaxl8VOWkZZ
ERWNtDEOKgM39KSOXUf26/PqdP1LxWgVcvlOzZIAiYH/87HLMim0LEKW0VDnfwgNJKMM
hzXZgaWiQDrWCYb4L62uE78/dViyvph1H1DA+cLnORzqEY/gz1c7vFQwCmbD8MJ5Iog0
aDLx2OMHjvPRXPPkxnuube5gtJFinFsUXZRWJvkHErYh2npGxnfO+nlkqSSEeIjzyTML
kQNw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-disposition:mime-version:user-agent:in-reply-to:references
:subject:to:from:message-id:date:dkim-signature;
bh=pdvhxabmo4GtP3hVgMExzW7T1hMK6rWlXZPFDSD5ljU=;
b=UAL7scLbroRqCFAfrSfxN9yyDwNYREu7rltK0/cscavCSr6eNLpFFQo6yCHAP2DGw/
cGplv7YHRtHyxldIpK0qxMKOt/PxQa6LMlKP+TZCXM8a6wSFLQ+pmLbdq5LneCQCMGGZ
wdMgPSYPf/zmz4dPOyxGcJBAyPy0CjawTEJRW9AwFERkOJanXFGN0u4//o86ZDB9Ge1E
YzA1oq7lt3BmniQQxpL3O1HZWN5l/Q4dVFcaL639xLAWvUwMywwYYkiI+EcMOrAxbJ9P
7LaHFUVnxmUtjkYte45KavZH+bZdbZzxwbRe6qgjOScC/8DYTHIhMBQKgt3cF/FmJIRx
cdJQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@chaseremittancegroup.online header.s=default header.b=E5nJYpGP;
spf=pass (google.com: domain of info@chaseremittancegroup.online designates 162.0.235.6 as permitted sender) smtp.mailfrom=info@chaseremittancegroup.online
Return-Path: <info@chaseremittancegroup.online>
Received: from server292-4.web-hosting.com (server292-4.web-hosting.com. [162.0.235.6])
by mx.google.com with ESMTPS id 1si7086245ejq.942.2022.01.31.02.20.47
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 31 Jan 2022 02:20:48 -0800 (PST)
Received-SPF: pass (google.com: domain of info@chaseremittancegroup.online designates 162.0.235.6 as permitted sender) client-ip=162.0.235.6;
Authentication-Results: mx.google.com;
dkim=pass header.i=@chaseremittancegroup.online header.s=default header.b=E5nJYpGP;
spf=pass (google.com: domain of info@chaseremittancegroup.online designates 162.0.235.6 as permitted sender) smtp.mailfrom=info@chaseremittancegroup.online
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=chaseremittancegroup.online; s=default; h=MIME-Version:Content-Type: In-Reply-To:References:Subject:To:From:Message-ID:Date:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=pdvhxabmo4GtP3hVgMExzW7T1hMK6rWlXZPFDSD5ljU=; b=E5nJYpGPq4gVoGNkVQMEJ+W+w9 mgfinLQgbJDUd1FSk9e2lcV+1rHaFTxWNqoBC74pmPuERzxIHcH1IvbySEjYXWH0Fl1nK1RYeXt+Z oH1P5fAotJWnzF34BkCAnfHzM3Gs4GyNu47Wx/y1V+gqkZ0rzieM7JJ2fuKdygdqd/3nwh5ZmKJQT HxqA5svk4jVx0QhIoo2H4FMcfY76KCxQbyiAbYrIU5VbX8eNQdXDt4dbHKtqW2JFATWfGAgI94kqA tETm8niAefqIGFz8l/jl4Rc43DGwCo+GmxacETKaw9m6XBbFFj8X8CxtJTh8ANTwAQv4qwImZQRUP 3A5hJ2Lw==;
Received: from [::1] (port=47420 helo=server292.web-hosting.com) by server292.web-hosting.com with esmtpsa
(TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from <info@chaseremittancegroup.online>) id 1nETnd-002W8m-7G for ; Mon, 31 Jan 2022 05:20:46 -0500
Received: from [41.79.219.193] ([41.79.219.193]) by www.chaseremittancegroup.online (Horde Framework) with HTTPS; Mon, 31 Jan 2022 05:20:41 -0500
Date: Mon, 31 Jan 2022 05:20:41 -0500
Message-ID: <20220131052041.Horde.p8Xe2djM5LbgMOBLb74oGmO@www.chaseremittancegroup.online>
From: info@chaseremittancegroup.online
To:
Subject: Re: CONGRATULATIONS
References: <CABwrbKpfEpkB8be5Hiuak=T1jr-SYD93Xo27+J7-UY53mZtzTA@mail.gmail.com> <CAJoePQLLPr1ncDKb=P_DCqCtZ1gdoaJm81g=RUwH8oJLLiKXjQ@mail.gmail.com> <CABwrbKpdNhx57oPyTseM8g9LS=dVJ40LCapz0fao9f4D-G_a-Q@mail.gmail.com> <CAJoePQKROy+UUCWiiM6oihYdom5DcNNcGDpZs1AmuMXUT5pYnw@mail.gmail.com> <CABwrbKp2NKpdqvGgf9wCNqMyw4qZ0Dzf3yv5Q=cRUnrwBEHpvg@mail.gmail.com>
In-Reply-To: <CABwrbKp2NKpdqvGgf9wCNqMyw4qZ0Dzf3yv5Q=cRUnrwBEHpvg@mail.gmail.com>
User-Agent: Horde Application Framework 5
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
X-OutGoing-Spam-Status: No, score=2.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server292.web-hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - chaseremittancegroup.online
X-Get-Message-Sender-Via: server292.web-hosting.com: authenticated_id: info@chaseremittancegroup.online
X-Authenticated-Sender: server292.web-hosting.com: info@chaseremittancegroup.online
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched

Orig IP: 41.79.219.193 | Orig ISP: Spacetel | City: Cotonou | Country: Benin

[Big Al]

Dear Esteemed Customer

Welcome to JPmorgan Chase Bank Plc, Thank you for your email and your
understanding, According to Miss MacKenzie Tuttle, She Requested for
the opening of a New account for the transfer of this Funds, Its due
to she doesn't want you to face the United states agency over Money
Laundering, so with the new account we will assure you that you are
protected, so I will advise you to do everything in your power in
order to remit this $380 today. Thank you for your understanding, I
will be looking forward to your reply back soon.

Note: For International transactions, we accept our Account Initial
Opening Deposit Of US$400 through Bitcoin or gift cards to speed the
process of international orders, Also do send a text to me directly
here as soon as you are ready to make the payment today. +1315 690 4074


Thanks for choosing to bank with us.

Yours Faithfully,
CEO:Jamie Dimon
The President and CEO
+1315 690 4074

[Big Al]

Dear Esteemed Customer ,

Note: For International transactions, we accept our Account Initial
Opening Deposit Of US$380 through Bitcoin or gift cards to speed the


process of international orders, Also do send a text to me directly
here as soon as you are ready to make the payment today. +1315 690 4074


Thanks for choosing to bank with us.

Yours Faithfully,
CEO:Jamie Dimon
The President and CEO
+1315 690 4074

[Big Al]

Dear Esteemed Customer

Thank you for your email, I have received your email with good
understanding, Kindly note that we only accept payment through
Bitcoin, cash app or through Paypal, if this payment options are not
acceptable by you then we think we cannot proceed with this
transaction. Please comply with us so we can finish the
process of setting up your online account today.

Thanks for choosing to bank with us.

Yours Faithfully,
CEO:Jamie Dimon
The President and CEO
+1315 690 4074

[firefly]

The fake site used in scam is a spoof of Chase Bank.

From the fake bank website:

The best way we know how to create reliable, long-term relationships is by aligning goals. This approach has permeated through all of our client interactions, whether with private equity clients, portfolio companies, or our employees. We know that having a reliable partner gives considerable peace of mind and we want to provide that sense of relief to everyone we work with. This is why nearly everybody in our investment team has continued to work alongside each other since 2011.

Contact details:

3 Time Sq #3,, New York,
NY 10036, United States​.
+1 315 690 4074
info@chaseremittancegroup.online

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=155006

From the domain name registration:

Domain name: chaseremittancegroup.online
Updated Date: 2021-12-31
Creation Date: 2021-12-06
Registrar Registration Expiration Date: 2022-12-06
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: Redacted for Privacy
Registrant Organization: Privacy service provided by Withheld for Privacy ehf

This is what the fake bank website looks like:

[Wayne]

CONGRATULATIONS ,

MacKenzie S Tuttle <austineikem1@gmail.com>
Reply-To: mackenzietuttle3@gmail.com

Bcc:

Thu, 17 Mar at 23:20

My name is MacKenzie Scott Tuttle, I am an American novelist and
philanthropist, the former wife of Amazon founder Jeff Bezos, who
later became the founder and CEO of Amazon. I believe strongly in
“giving while living”. My philosophy about life is that you should use
your wealth to help people and I have decided to secretly give
US$1,500,000.00USD to randomly selected individuals worldwide.

On receipt of this email, you should count yourself as the lucky
individual. Your email address was chosen online while searching at
random.
Kindly get back to me at your earliest convenience, so i know your
email address is valid.
Also send your full informations to enable proceed with your wire transfer.

Visit the web page to know more about me:
https:/ /en.wikipedia.org/wiki/MacKenzie_Bezos

Regards,
Miss MacKenzie Scott. Tuttle

[firefly]

Hello,

I'm Mackenzie Scott, Ex-wife to Jeff Bezos (Amazon Founder and
CEO). I'm donating $4 billion to charities, churches,
individuals, colleges and businesses across the Globe from
Scott's Foundation to provide immediate support to people and
businesses suffering economically from the impact of COVID-19
pandemic and the ongoing war in Ukraine. Your email emerged as
one of the lucky winners after an electronically conducted ballot
process.

I have a donation grant worth $8,500,000.00 Dollars for you. You
are to contact Mr. BRADLEY WRUBEL for more information if you're
interested.

MR. BRADLEY WRUBEL
bradleywrubel@scotts-foundation.org

Congratulations.

Yours Sincerely
Mackenzie Scott
The Scott Foundation
P.O. Box 1513
Los Gatos, CA 95031-1513
USA.

Header:

Received: from egonorta.gwoccmed.com (egonorta.gwoccmed.com. [45.130.138.180])
Reply-To: mackenziescott@scotts-foundation.org
Subject: CONGRATULATIONS...
Date: 1 Jul 2022 17:52:20 -0700
Message-ID: <20220701175220.0C0D6A17060B00B6@gwoccmed.com>

Originating IP: 45.130.138.180
Originating ISP: Wholesale Services Provider
Country of Origin: Australia