Scam Tip Report #91238 - financial consultants


Scam ReporterScam Tips Received
Falcons-fan
Somewhere in United States
2018-06-15 10:31:32
Nigerian/419 Scam
+5 financial consultants 
 Scammer
  Information
Name:
Tracy Sanson
Email Address:
tracy.sanson@outlook.com
Country of Scam:
United States (US)
SPF: FAIL with IP 31.210.86.220
192.168.8.101 LAN SPECIAL USE - IANA ROUTING
105.4.7.211 SOUTH AFRICA Probable Origin IP ISP: Neotel Pty Ltd

Hello,

I must let you in on the real facts about your delayed payment. I am the secretary to the foreign debt department of the World Bank Group office,I am very much aware of the ordeal you are passing through in order to actualize your long delayed payment.

Not long after the World Bank completed the acquisition process of all pending payments, I discovered that my boss connived with some top officials to divert funds already approved to settle lottery winners, international contractors and inheritances.

The World Bank has already given approval for the payment of your fund while my boss deliberately delay your payment and continue to issue one fee or the other from different quarters. I wonder why you haven?t noticed
all this while.

Your fund was authorized to be paid to you through the WB/IMF financial consultants in the USA with a Key Tested Reference/CLAIMS CODE Number,which was supposed to have been issued to you before now,

Upon your response to this message, I shall give you all you need to contact the World Bank payment centers in the USA to facilitate the release of your payment.

Yours truly,
Ms.Tracy Sanson

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
Follow Ups/Extra Information. Most recent is listed first.
Falcons-fan   (Somewhere in United States) Added the following extra information on :2018-06-15 15:57:41
 Scammer
  Information
Name:
Mr.James Olson
Email Address:
imfwara@consultant.com
105.4.1.207 SOUTH AFRICA
We have received the completed Details as requested.
However, if you read my first e-mail very well, you will remember that I mentioned that the claim process requires Legalization from the Federal Deposit Insurance Corporation (FDIC), you are required to send the Legalization fee to that effect.
Now that we have received the completed details, we have attached your Data with other documents and sent to FDIC for Legalization and Payment Authorization for a Swift Transfer.
In the mean time, the Legalization fee is required from you as soon as possible, so that the Authorization BOND will be issued and approved in your name to enable us effect transfer to your account as stated in the form.
The Legalization and Authorization fee is a calculated amount of $1,250 only and will be wired to the FDIC receiving bank account on request.
Sincerely, Mr.James Olson {WB/IMF Accredited Agent}
In this Office, we help our clients develop their financial profile, assist them in defining financial goals and present them with adequate investment. ************************************************************************************************************************************************* This message and any attachments are confidential to the ordinary user of the email address to which it was addressed and may also be privileged. If you are not the addressee, you may not copy, forward, disclose or use any part of the message or its attachments and if you have received this message in error, please notify the sender immediately by return e-mail and delete it from your system. ***********************************************************************************

Scam Email
Subject: Re: my subject
From: IMF delivered-to:
received: from [105.4.1.207] ([105.4.1.207]) by 3c-app-mailcom-lxa13.server.lan (via HTTP); Sat, 16 Jun 2018 00:38:10 +0200
arc-seal: i=1; a=rsa-sha256; t=1529102293; cv=none; d=google.com; s=arc-20160816; b=zQv+RMbkH1GOGlU3s2wskOD3kr2hqDPwsAOKT6UyNS...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:references:in-reply-to:sen...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) smt...
return-path:
received-spf: pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
authentication-results: mx.google.com; spf=pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) smtp.mai...
mime-version: 1.0
message-id:
content-type: text/html; charset=UTF-8
date: Sat, 16 Jun 2018 00:38:10 +0200
importance: normal
sensitivity: Normal
in-reply-to:
references: content-transfer-encoding: quoted-printable

NOBODYLINES

Falcons-fan   (Somewhere in United States) Added the following extra information on :2018-06-15 13:01:20
 Scammer
  Information
Name:
Mr.James Olsons
Email Address:
imfwara@consultant.com
Attn:
We have checked with the foreign debt department of the World Bank in Washington and it was established that you are the beneficiary to this fund,our delay was as a result of verifications of your Key Tested Reference and Claims Code Numbers.
As the director of claims, I shall make all arrangements and apply for the immediate release of the funds to you. Your application and the support documents would have to go through the Federal Deposit Insurance Corporation (FDIC) for legalization and payment authorization. FDIC is an independent agency that maintains stability and public confidence in the nation's financial system.
The legalization and the authorization of your payment make it legitimate since the deposited fund was under the protection of the FDIC which guarantees a swift payment of your fund.
There is an attached form from our bankers with which you shall give us instructions on how to pay the funds to you. The filled out form would be attached to all other documents with which I shall present to the FDIC for the legalization and payment authorization. As soon as the FDIC authorize and issue the payment authorization BOND, I shall forward your file to our bankers for transfer.
Please, follow these instructions. 1. Download the Form and Print it out 2. Fill ONLY the section 5 and 6 part of the form. 3. Send a copy of the filled out form and a copy of your I.D. to us as email attachment.
Upon receipt of the filled out form,we shall forward them to the FDIC for legalization and we shall make the application to the FDIC on your behalf and have the payment approved/transferred to your account (as nominated in the form).
Sincerely, Mr.James Olsons {WB/IMF Accredited Agent}
In this Office, we help our clients develop their financial profile, assist them in defining financial goals and present them with adequate investment. ************************************************************************************************************************************************* This message and any attachments are confidential to the ordinary user of the email address to which it was addressed and may also be privileged. If you are not the addressee, you may not copy, forward, disclose or use any part of the message or its attachments and if you have received this message in error, please notify the sender immediately by return e-mail and delete it from your system. ***********************************************************************************

Scam Email
Subject: Re: my subject
From: IMF delivered-to:
received: from [105.4.7.211] ([105.4.7.211]) by 3c-app-mailcom-lxa13.server.lan (via HTTP); Fri, 15 Jun 2018 21:53:04 +0200
arc-seal: i=1; a=rsa-sha256; t=1529092386; cv=none; d=google.com; s=arc-20160816; b=lVyh5j5LKUSaD9ELCcVy2WXiJ+X2MPTIUAm3XzhOY8...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=references:in-reply-to:sensitivity:importance:date:s...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) smt...
return-path:
received-spf: pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
authentication-results: mx.google.com; spf=pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) smtp.mai...
mime-version: 1.0
message-id:
content-type: multipart/mixed; boundary=refeik-ce270b31-78f1-48bf-a1b7-11732447dc5c
date: Fri, 15 Jun 2018 21:53:04 +0200
importance: normal
sensitivity: Normal
in-reply-to:
references:
--refeik-ce270b31-78f1-48bf-a1b7-11732447dc5c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Falcons-fan   (Somewhere in United States) Added the following extra information on :2018-06-15 12:39:33
 Scammer
  Information
Name:
James Olson
Email Address:
imfwara@consultant.com
105.4.7.211 SOUTH AFRICA
Attention,
Regarding your message,we are aware the you have some money to claim which is yet to be processed.Before we commence on the processing of your payment the below details must be submitted:
Your Name in Full,Your complete Address,Your Gender,Your Telephone Number,A copy of your ID and Occupation.
As soon as the above details is received here we shall commence on the processing immediately.
We expect to hear from you soonest.
Mr.James Olson

Scam Email
Subject: Re: my subject
From: IMF delivered-to:
received: from [105.4.7.211] ([105.4.7.211]) by 3c-app-mailcom-lxa13.server.lan (via HTTP); Fri, 15 Jun 2018 21:33:10 +0200
arc-seal: i=1; a=rsa-sha256; t=1529091192; cv=none; d=google.com; s=arc-20160816; b=rtwmOFOxY1TaMeeO8zx0zpyyqn3fX7LZgKpvS9Rdu5...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:references:in-reply-to:sen...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) smt...
return-path:
received-spf: pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
authentication-results: mx.google.com; spf=pass (google.com: domain of imfwara@consultant.com designates 74.208.4.200 as permitted sender) smtp.mai...
mime-version: 1.0
message-id:
content-type: text/html; charset=UTF-8
date: Fri, 15 Jun 2018 21:33:10 +0200
importance: normal
sensitivity: Normal
in-reply-to:
references: content-transfer-encoding: quoted-printable

NOBODYLINES

Falcons-fan   (Somewhere in United States) Added the following extra information on :2018-06-15 12:04:19
 Scammer
  Information
Name:
Tracy Sanson
Email Address:
tracy.sanson@outlook.com
Hello,
I got the details and I must let you know that your long approved payment would be processed legally by the World Bank/IMF consultant and funds must be release to you through their associate bankers.
My concern is to put you through the right channel,having full knowledge of what you have gone through in the past. You may compensate me when you have had your funds in your account.
Below is a fund release application you will send to the consultant with your payment Key Tested Reference: TR-31610 and Claims Code Number: WB/IMF/C2/09.
Follow their instruction for the release of your funds.
Please copy the letter below and send to the IMF/WB Consultant on their email.
Yours truly, Ms.Tracy Sanson
-------------------------------------------------------------------------------------------------------------- {WB/IMF Accredited Agent} Email: imfwara@consultant.com processingdept@imfwara.com
Attn: James Olson (Claims Director)
I am with a payment Key Tested Reference:TR-31610 and Claims Code Number:WB/IMF/C2/09 with World Bank approved funds with your bankers.
Base on the record received from the World Bank/IMF agent, I understand that my US$2M has been with your bankers. We wish to have same amount and accrued interest transferred to me in my capacity as the beneficiary.
I await further instructions on the above subject matter.
Yours sincerely
Sent from Outlook

Scam Email
Subject: Re: my subject
From: Tracy Sanson delivered-to:
received: from LO2P265MB0304.GBRP265.PROD.OUTLOOK.COM ([fe80::4c30:ebdd:2d27:2f81]) by LO2P265MB0304.GBRP265.PROD.OUTLOOK.COM ([fe80::4c30...
arc-seal: i=1; a=rsa-sha256; t=1529088939; cv=none; d=google.com; s=arc-20160816; b=U3FSLiuV1d8fEpIjcu0BIZJgofdZLjv6QFINmg6jHP...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:content-language:accept-language:in-rep...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@outlook.com header.s=selector1 header.b=L9lSzgEr; spf=pass (google.com: domain...
return-path:
received-spf: None (protection.outlook.com: outlook.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=tracy.sanson@outlook.com;
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-...
thread-topic: my subject
thread-index: AQHUBM4iWlNCniSQCk+C0ZlN+xzfVaRhozBOgAADUgCAAAP08w==
date: Fri, 15 Jun 2018 18:55:37 +0000
message-id:
references: in-reply-to:
accept-language: en-US
content-language: en-US
content-type: multipart/alternative; boundary="_000_LO2P265MB0304C2E2713326FA43B98DDE817C0LO2P265MB0304GBRP_"
mime-version: 1.0

Falcons-fan   (Somewhere in United States) Added the following extra information on :2018-06-15 11:31:49
 Scammer
  Information
Name:
Ms.Tracy Sanson
Email Address:
tracy.sanson@outlook.com
Hello,
Thanks for heeding to my delineated information about your payment and I must tell, you have taken a good step to reply.
I understand that the difficulties and frustrations you had in the hands of impostors for this long has really made you not to trust or believe anyone in actualization of this payment. I am not a saint but I believe in putting you through the right channel to get this fund to your account.
One thing you must do is to urgently stop all dealings with any other party (ies) concerning this payment and I assure you that your fund will be release to you from the legitimate source within one week.
You would have to send your full contact information such as: Your full names: Address: Country: Tel: Fax: Age: Occupation: Value Amount: And any other information concerning your payment.
As soon as I receive this info, I would prepare your express application with your payment Key Tested Reference/Claims Code Number which you would forward to the World Bank/IMF financial consultant whose duty is to legalize the support documents and release your funds without further ado.
Yours truly, Ms.Tracy Sanson
Sent from Outlook

Scam Email
Subject: Re: my subject
From: Tracy Sanson delivered-to:
received: from LO2P265MB0304.GBRP265.PROD.OUTLOOK.COM ([fe80::4c30:ebdd:2d27:2f81]) by LO2P265MB0304.GBRP265.PROD.OUTLOOK.COM ([fe80::4c30...
arc-seal: i=1; a=rsa-sha256; t=1529087210; cv=none; d=google.com; s=arc-20160816; b=0HeWYYvB4Cp5ZYE6QLsEYPS007YVibAWf/60jDEXJo...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:content-language:accept-language:in-rep...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@outlook.com header.s=selector1 header.b=qV8+2TvB; spf=pass (google.com: domain...
return-path:
received-spf: None (protection.outlook.com: outlook.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=tracy.sanson@outlook.com;
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-...
thread-topic: my subject
thread-index: AQHUBM4iWlNCniSQCk+C0ZlN+xzfVaRhozBO
date: Fri, 15 Jun 2018 18:26:48 +0000
message-id:
references:
in-reply-to:
accept-language: en-US
content-language: en-US
content-type: multipart/alternative; boundary="_000_LO2P265MB030488826F3CF38BA350264A817C0LO2P265MB0304GBRP_"
mime-version: 1.0


 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING