FAKE BANK SCAMS

updated mar. 4, 2004

The Lads are faking bank web sites with more or less increasing sophistication.
The following is a rambling collection of examples sent by Kindly Contributors.
Updates will be stacked on top (so #1 is at the bottom). There is
a very interesting article in the Financial Times (3/3/2003) about actual penetration
of major banks by scammers.


List of dubious institutions mentioned:
http://www.eurolinkfinance.com
http://www.cu-bk.com/ (Credit Union Bank CI [Cote d'Ivoire] ) --> transferred to http://www.creditunionbankci.com/
http://www.sprintsecuritiesbv.com
http://www.lyonaise.com
http://www.firstpacific-fc.com/
http://www.primroseventures.8m.net/
Universal Securities BV (Netherlands)
CRUBANK CORPORATION OF BAHAMAS
Monarch International Bank
DBS Bank (fake?)
www.guaranteefinanceltd.com
www.drc-ng.com/ (impersonating the Central Bank of Nigeria)
BiaoBank
Kapital Securities
CrownSecuritiesBV.com
e-litebv.com
www.equitafinance.biz
http://www.alliedcharteredbanks.com/
www.swisscarribean.com
http://www.allstatestrustbank.com/ (apparently impersonating a real bank)

21. ENGLAND(?)

March 2004

http://www.eurolinkfinance.com
Eurolinkfinance

The source HTML for the login page contains a nice Javascript in which the user names and passwords are hard coded, and the passwords are all the same. Covered in more depth on http://www.scamorama.com/eurolinkfinance.html or try it yourself!

20. HONG KONG

March 2003

  http://www.cu-bk.com/ (Credit Union Bank CI [Cote d'Ivoire] )  
  --> the web site was transferred to http://www.creditunionbankci.com/
  
  There is a PHP script which upon login showed the Kindly Contributor 
  a 'bank account'  belonging to PRINCE MICHEAL OBI A. CHUKWURAH with 
  an apparent balance of $25 million. In case you're curious:
  LOGING NAME  CU%bk17
  PASS WARD    22322

19. NETHERLANDS

March 2003

Sprint Securities BV claims to be a finance and security firm registered by the RvA, Dutch Council for Accreditation. They say they are in the business of handling finances for lotto contests among other things. The RvA says it has no relation with Sprint Securities and considers them a fake. ( www.rva.nl/uk/rfouteclaimuk.html ).

The web site ( www.sprintsecuritiesbv.com ) slips up in a number of places. There is a nice discussion of it (in French) at:
http://www.netarmenie.com/forums/viewthread.php?tid=1196
( NetArmenie Forums > Tout et Rien > ATTENTION ARNAQUE !!! : SPRINT SECURITIES BV & EUROLITE BV )

Some of the remarks made in this forum were apparently taken to heart by the scammers, as the web site has been slightly changed. Still, beware!

thanks to a Kindly Contributor in Denmark


18. IRELAND

  Date:  15 Jan 2003 
  Subject:  Re: Another False Bank  
  
  My alter-ego was invited to place a large sum of money into this bank to facilitate the
transfer of ~$Gazillion to him. Things didn't work out as planned for the lad when he
found out that my alter ego works for "The Secret Biological Weapons Research Institute
of Ireland" and wanted to bring the money in person when he applied for Political Asylum
in Nigeria...
  
  --> www.lyonaise.com
  

17. IRELAND


 To:  postmaster@scamorama.com 
From:  (Kindly Contributor in Ireland)
Date:  15 Jan 2003  
Subject:  419 scam bank  

Hi I was ' Impressed ' with the fake Bank web site the my pet fraudster 
Dr.Isah Gambo is offering for my use! It's certainly quite sophisticated 

From: "Dr.Isah Gambo" drisahgambo1@dr.com 
To: Kindly Contributor 
Date: Wed, 15 Jan 2003 06:44:48 -0500 
Subject: Re: Good day. 
X-Originating-Ip: 66.178.46.12 
X-Originating-Server: ws1-2.us4.outblaze.com  
X-UIDL: 3723eb36cee065cbbb743b33bf8c073f 

Dear (Kindly Contributor), 

Thank you very much for your prompt response to my mail. 

Since you feel telephone conversation is not secure,then,i guess 
we should proceed with the email correspondence because means of 
communication should not be a hinderance to the execution of this 
business transaction. 

I suggest that you should open immediate correspondence with the 
finance company and their webpage is as follows: 
www.firstpacific-fc.com 

As soon as you receive this mail,please view the webpage and every 
information you require is in it. 

I will wait for your response as a matter of urgency. 

Best regards 

Dr.Isah Gambo. 


16. FRANCE

Sender: paulmusa33@dygo.com
Date: Fri, 4 Jan 1980 03:21:56 GMT

PRIMROSE VENTURES LIMITED, 
STE. 3b, ROCKVIEW PLAZA,
VICTORIA ISLAND,
LAGOS.
www.primroseventures.8m.net
TEL: 2348023263622

blah blah

I am the director of the above named company, I recently retired as the
director of finance of the Federal Ministry Of Power & Steel (FMP&S).
During my tenure as the director of finance, I was also in charge of the
federal tenders board.
blah
In the course of our work at the tenders board, we recieved a bid of
(USD46.8M) from Arab Contractors Company of Egypt for the refurbishing
of the six thermal flow stations and the supply of (1000 units) of 27KVA
transformers for the south-western part of the country.
etc etc
Arab contractors have executed the whole contract and have been paid
off, leaving the balance USD23.2M. 
etc etc
...I have therefore been mandated as a matter of trust by my
partners to source for a business partner to whom we could transfer the
sum of USD23.2M by drawing up a letter of domiciliation instructing the
concerned government parastatals i.e the FMP&S and CBN to pay into the
partner's account the contractual entitlement of USD23.2M. You will
agree with me that a letter of domiciliation is an accepted form of
doing business worldwide.
more stuff

Should this transaction interest you, you are to contact me on my
telephone number 2348023263622 or my e-mail address, so that I can brief
you fully, and discuss your renumeration for this undertaking.

Yours Faithfuly,

Paul Musa.

15. PHILIPPINES

 

There's another one - one of the security firms that they use in the Netherlands: 

http://www.universalsecuritiesbv.com  - slickly designed ... 

It used to be redirected to a student account at Utrecht School of the Arts - 
so I e-mailed the school to suspend the account.  It did get suspended but it 
just got transferred to planet.nl (Planet Internet).  Well, the work of an anti-
scammer never stops, huh? 


14. PHILIPPINES

 
Hi there good guys at scamorama:
Here's another fake bank that you can add in your list (from Mrs. Louise
Estrada):

--------- beginning of quote -------------

I appreciate your concern over this transaction, this business has nothing to
do with any documents so you need not worry as nothing will go wrong be rest
assured of that in line with that You are required to contact and open an
online account with the Crubank of Bahamas where this money is so that the
funds will be transfered into your account. it is very important that you use
your name to open this account.and inform me as soon as you have done that 

BANK NAME:CRUBANK CORPORATION OF BAHAMAS 

CONTACT PERSON: MICHEAL GLENN 

EMAILS: mglenn@mail.crubancorp.com 

customerservice@crubancorp.com 

info@crubancorp.com 

WEBSITE:www.crubancorp.com 

TEL: 0012423808005 

0016477220069 

TOLL FREE:18666993069. 

As soon as you reach them, tell them that you want to open an online account
where they will send your money for onward remittance to your country Please
reach them immediately to open the account and get me posted.am counting on you
to make this whole transaction come to sucessful end. 

Make sure that you open the account today so that the funds will be transfer
with out delay. Bless You. 

Louise Mrs.

--------- end of quote --------------

According to the Central Bank of the Bahamas website, this bank is "not
licensed under the Banks and Trust Companies Regulation Act, 2000 to conduct
banking and/or trust business in or from within The Bahamas. Members of the
public who transact business with these persons do so at their own risk.
Prudence should be exercised when dealing with these persons. "


13. USA

 
Heres one I haven't seen before. 
They even set me up with a nice online bank account just full of money.


I AM  DR. OSCAR DURU...
I RETIRED LAST MONTH AS THE CHIEF AUDITOR IN THE
CENTRAL BANK OF NIGERIA; AND IN THE COURSE OF MY
ROUTINE WORK, I CAME ACROSS AN INTERNATIONAL FUND 
TRANSFER FILE WITH YOUR NAME  AS BENEFICIARY. 
[blah blah]
THE NEXT STEP WAS TO CONTACT YOU TO RECONFIRM YOUR
BANKING COORDINATES, BUT THERE WERE RAMPANT FRAUDS 
AND SCAMS INVOLVING ALMOST ALL AREAS OF THE CENTRAL BANK 
OF NIGERIA, AND I THEREFORE DECIDED TO MOVE CAUTIOUSLY. 
IT BECAME IMPOSSIBLE TO TRANSFER OUT THIS MONEY FROM THE
CENTRAL BANK OF NIGERIA!

LAST MONTH, I FOUND THE SOLUTION!  
USING MY WELL FOUNDED CONNECTIONS IN THE CENTRAL BANK OF NIGERIA, 
I RAISED A PAYMENT VOUCHER IN YOUR FAVOUR, AND PAID IN THE SUM 
OF USD75 million INTO THE MONARCH INTERNATIONAL BANK PLC.  ...
THIS MONEY IS NOW  DEPOSITED IN YOUR PERSONAL ACCOUNT IN
MONARCH INTERNATIONAL BANK PLC;  AND I WILL INSTRUCT YOU LATER 
HOW TO PERSONALLY WIRE TRANSFER PART OR ALL OF IT TO ANY BANK
OF YOUR CHOICE ANYWHERE IN THE WORLD!

http://www.monarchinternationalbankonline.com

PLEASE CONTACT ME IMMEDIATELY BY EMAIL, STATING
YOUR CURRENT PHONE, AND
FAX NUMBERS, AND I WILL GET BACK TO YOU WITH THE
FOLLOWING INFORMATION:

(1)     Customer Name
(2)     Customer ID
(3)     Security Code
(4)     Account Number
(5)     Amount in US$

ONCE YOU GET THE ABOVE INFORMATION FROM ME, YOU
WILL BE ABLE TO GO STRAIGHT TO THE MENU PAGE OF 
THE MONARCH INTERNATIONAL BANK PLC,AND TO
CUSTOMER LOG IN, AND IMMEDIATELY ACCESS YOUR
ACCOUNT/MONEY! THE LOGICAL AND NEXT STAGE IS FOR 
YOU TO BEGIN WIRING OUT YOUR MONEY! UNBELIEVABLE?
PLEASE TRY AND SEE!

REGARDS,
OSCAR DURU

Phone: +234 90 505 509
email: antonio3@congomail.com

- and later -

Dear Friend,

I have tried several times to reach you by phone but unfortunately I
did not succeed.

I have good news; I have concluded the establishment of your  A/C, and
I am now ready to give you the A/C access information.
As per our agreement, upon receipt of your Access information,  you
will arrange to wire immediately 25% of the total holdings in your  A/C
to my personal  Bank A/C below.

Bank:  DBS BANK
ADDRESS: 6 SHENTON WAY DBS BUILDING, SINGAPORE 068809
A/C No:      0065-000361-01-4
SWIFT:      DBSSSGSG
BENEFICIARY:  OSCAR DURU

PLEASE CALL ME IMMEDIATELY ON ++234 90 505 509 
TO RECEIVE THE ACCESS INFORMATION WHICH WILL INCLUDE:
AMOUNT:
CUSTOMER NAME:
CUSTOMER ID:
SECURITY CODE:
A/C NUMBER:

Regards,

Oscar Duru

From: OSCAR DURU [oscarduru@fastmail.fm]
Sent: Thursday, August 01, 2002 11:38 PM
To: Kindly Contributor
Subject: YOUR A/C ACCESS INFORMATION (please also open attachment)

amount: USD75000000
        customername: Kindly Contributor
        customerid: Kindly
        securitycode: Z55X66T110
        accountnumber: 903-111-672

http://www.monarchinternationalbankonline.com



12. AUSTRIA



Hi :-) 
Playing with one of them, (of course using a different name)
I received this web-link

http://www.guaranteefinanceltd.com/Sites/ST10170/PG10426.asp

might be another web-site set up just for this scam....

 


11. USA



You might have already seen this, but anyway...
After looking at the phony site Tommy Udo mentioned at:
     http://www.drc-ng.com/

I linked thru to their phony 'log in' online CBN banking page:
	http://www.drc-ng.com/CBN-Transfer/Log_In.asp

which (when you put in the right password) links to an 
interesting 'account statement':

http://www.drc-ng.com/CBN-Transfer/Accounts/Statement_of_Account.htm

Sophisticated eh?

Keep up the good work. I hope to contribute more soon.

If you back up to the page at

http://www.drc-ng.com/CBN-Transfer/Main.asp

 it appears they are using this to pretend there is millions
in an account in your name, then they ask you to put your
bank info so they can 'transfer' it to you.

It's actually the most sophisticated 419 site I've ever
seen, especially compared to the Eurolite one which
was quite amateurish.

Cheers,

Todd




10. UK

 
Subject:  I saw this story and thought of Scam o Rama  

Hi, 

I read your "Big Mac" series of emails a couple of days ago 
after hearing more and more about 419 fraud.  It was probably 
one of the funniest email correspondences I've read. 

I thought you'd be interested to read the following story on BBC News, 
it was also on the radio this morning too. 

http://news.bbc.co.uk/1/hi/technology/2308887.stm 

Keep up the sterling reportage. 


Cheers 
Kindly Contributor
 

The link is titled "Fake bank website cons victims" and described
how West African criminals have used a fake version of a real British 
bank's online service to rob people. 



9. FINLAND

      
 
Says the Kindly Contributr: WARNING ! ! !  They Web sites are very good ! 

Says the Lad:
"... The site is (www.biaobank.com)I believe that this is a good 
news for us to credit this US$18m into your online 
account with my bank, then you will transfer immediately 
from your online account with my bank to your private 
account for our mutual benefit. 

On this note, I advice you to that and send your Online 
account to me for my Lawyer to arrenge the Legal documents 
that proofs you the next of kin to this fund.

My regards to your family."




8. IRELAND



"Oliver Flanagan" in Ireland reported on "Kapital Securities": 
http://www.scamorama.com/oliver-kima.html  



7. USA


Kindly Contributor Rev. Elmer Fudd says:

Hi 
I also came across Kapital in my encounters with Kima Savimbi. 

I received a fax from the Debt Reconciliation Committee after 
corresponding with Dr Adams Obozuwa.  The DRC said that the 
payments to may account had been approved and that I had to 
pay a signing fee.  When I received the fax, I did a search 
and the site came up. 

I thought that the site was suspect so I went to the contacts 
section and found two email addresses and sent them the following email: 
---------------- 

Dear Dr Udoji 

I am written in respec of the fax dated 4 November 2002 from you 
in respec of the $38,000,000 million in monies that you'll be 
sending to my account in AMsouth Bank Mississippi. 

I am writting to let you all know that I's considerin' gettin a 
Senior Advocate Attorney of Nigeria  called Dele Ojo to help with 
this hyar tansactiun.  Does you think he is acceptable? 

Kind regrds 
Rev. Elmer 


They replied with this message the next day: 
Dear Sir, 
We are in receipt of your e-mail dated 19-11-2002. 
We hereby advise you to go ahed and hire MR.DELE OJO (ESQ)to represent you on 
the  subject matter. He is very good and reliable. 

Thank you. 
JOSHUA MOTUTU 
DEBT RECOUNCILIATION COMMITTEE 


That means they are either fake or I am really getting the money!  
If you believe I am getting the money then perhaps you can give me 
the $6,000 attorney's fees - I will give your 5% of my share of the 
$38,000,000!.  IS that OK? 

Regards 
Rev. Elmer 




6. NETHERLANDS


8.
(NETHERLANDS)


Interesting one here - Advance Fee Fraud letter with "No Advance Fee
Fraud"-guarantee built in! ("Please be informed that you will not be 
required to spend a dollar of your money on this transaction, as all 
fess will be deducted before the sharing of the fung" - end of quote).

Received: from relay.surfnet.nl ([192.87.5.144]) by
igrsxc01.i-groep.leidenuniv.nl with SMTP (Microsoft Exchange Internet Mail
Service Version 5.5.2650.21)
	id XGYR9MNR; Thu, 21 Nov 2002 04:15:03 +0100
Received: from localhst2781.com (unknown [195.166.237.34])
	by relay.surfnet.nl (Postfix) with SMTP id 36050443D
	for Kindly Contributor; Thu, 21 Nov 2002 04:15:01 +0100 (MET)
From: "ADAMU IBRAHIM" ]adamu_02@mail.com]
To: Kindly Contributor
Date: Thu, 21 Nov 2002 04:07:25 -0500
Subject: URGENT HELP
X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM
Message-Id: [20021121031501.36050443D@relay.surfnet.nl]

ADAMU IBRAHIM & CO
SOLICITOS & ADVOCATE
232 Manute Avenue V/Island Lagos.
Tel: 234-803-7179388, fax 234-1-7597187
Dear Sir,

RE:	WILL EXECUTOR

I am sure that this letter will come to you as a surprise, but I shall be
grateful if you would read with the interest of assisting in this proposal
tendered herein.

My name is Barrister ADAMU IBRAHIM, Attorney at Law and Legal advisor to Mr.
ISSAH LONTHAN a lebaneses by nationalist. Two years ago, my client Mr. Issah
Lonthan died in the ill-faled A.D.C airline crash at Egbin a sub-swamping area
in Lagos state after take off.

Before his death, he disclosed to me some amount of money ($32.645 MUSD) which
he has with a foreign finance house in London and made me his chief will
executor, and his only Child Mr. KAZHEEM LONTHAN his next of kin. But
unfortunately the only child died of excess drug taking last year. May his soul
rest in peace. Infact, last week equita finance house in London sent me a draft
of information about the said amount deposited in their finance house by my
late cleint Mr. Issah Lonthan that by the end of this last quarter of 2002 the
account will be dormant & closed for inactiveness within the last two year.

I now took this upon myself to search for a trustworthy person and corporation
to whose account these fund can be transferred to as soon as possible. By
proving this person or corporation documents indicating depositary and account
statements would be disclosed.

Infact, all you are to do is open an account with the Equita Finance House  in
London and the power of Attorney will be giving to you to transfer the money to
your account.
Bank Information
Telephone Number:	00-44-207-0169711
Website:		www.equitafinance.biz	

You will retain40% of the transferred sum, while 10% for any cost being incured
during this transaction, and the balance 50% which is for me will be kepty
under your supervision immediately the money is transferred into your account
for safe keeping.
Please be informed that you will not be required to spend a dollar of your
money on this transaction, as all fess will be deducted before the sharing of
the fung. Please if you are able to assist me, you may send your response Via
my E-mail adamu_02@mail.com, or Telephone number 234-803-7179388 fax
234-1-7597187.

I await your favorable response
Yours faithfully,

Barr. (Dr.) Adamu. Ibrahim



5. AUSTRALIA


From:  Stew deBaker Hawke (the one and only) 

Hello to all
I am mailing you all about a fake bank web site that I belive is
being used by Nigerian 419 advanced fee fraudsters to scam money
out of people. The Url of the site is
http://www.alliedcharteredbanks.com/about.html
Which Pings to this IP address
64.29.21.95
Which seems to be owned by Dialtone Internet.
http://www.dialtone.com/
There is a warning issued by the Central bank of The Bahamas
regarding this bank. You can see it here.
http://centralbankbahamas.com/public/notice010802.pdf
An amusing exchange with the fraudsters can be seen here.
http://www.scamorama.com/ilichy-amechi.html
The mention of the bank is about halfway down.
The domain name seems to be owned by these people so I am including
them in this mailing. please note this has also been sent to the 
Florida Police and the FBI
Brand Financial 
 3400 Consolate Pl.
 Saint Johns, NFLD N3N4D6
 CA
 Domain Name: ALLIEDCHARTEREDBANKS.COM
 Administrative Contact:
  R. Stevenson brandfin@hotmail.com
 Brand Financial
 3400 Consolate Pl.
 Saint Johns, NFLD N3N4D6
 CA
 Phone: 902 5832359 
 Fax: NULL
 Technical Contact:
 Administrator DNS admin@webmasters.com
 WEBMASTERS.COM
 3003 W. Stovall Street, Suite 100
 Tampa, FL 33629
 US
 Phone: (813) 837-8000 
 Fax: (813) 837-8900
 Record updated on 2002-06-13 11:30:31
 Record created on 2002-06-13
 Record expires on 2004-06-13
 Database last updated on 2002-10-09 23:05:37 EST
                   Domain servers in listed order:
                   NS10.WEBMASTERS.COM           64.29.20.205                  
                   NS9.WEBMASTERS.COM            64.29.20.35                   


 


4. USA


From Comrade Alexander Kerensky (see Funny Links on this web site).

Hello persons at Scamorama, 

Lilith is having a conversation with the lads with the website 
www.swisscarribean.com. In this version of the scam Lilith has 
to "login" to a tracking website using a so called "tracking number" 
to find out where the luggage contain the millions of dollars are. 
(Who says scammers are not refining the scam?) The "login" is no more 
than a simple javascript that redirects you to a specific page based 
on the tracking number entered. 

The relevant javascript is reproduced below... 

[script language=javascript] 
function check() 
{ 
var track=document.Login.shipmentid.value 
switch (track) 
{ 
case "00134001841184":window.location="scfsshipment41184.htm";break 
case "00134841841168":window.location="scfsshipment41168.htm";break 
case "00134841841169":window.location="scfsshipment41169.htm";break 
case "00134841841170":window.location="scfsshipment41170.htm";break 
case "00134841841172":window.location="scfsshipment41172.htm";break 
case "00134841841173":window.location="scfsshipment41173.htm";break 
case "00134841841174":window.location="scfsshipment41174.htm";break 
case "00134841841175":window.location="scfsshipment41175.htm";break 
case "041340018422":window.location="scfsshipment18422.htm";break 
case "3413400184444":window.location="scfsshipment184444.htm";break 
case "84664130263116":window.location="scfsshipment63116.htm";break 
case "84664130263117":window.location="scfsshipment63117.htm";break 
case "88016214730001":window.location="scfsshipment730001.htm";break 
case "470826577414":window.location="scfsshipment77414.htm";break 
case "80234154054":window.location="scfsshipment54054.htm";break 
case "95910550212":window.location="scfsshipment550212.htm";break 
case "95910550211":window.location="scfsshipment0550211.htm";break 
case "95910550213":window.location="scfsshipment550213.htm";break 
case "91910550213":window.location="scfsshipment91055021.htm";break 
case "92910550214":window.location="scfsshipment0550214.htm";break 
case "85910550212":window.location="scfsshipment80550212.htm";break 
case "0013400181302":window.location="scfsshipment01340018.htm";break 
case "0013400181301":window.location="scfsshipment00181301.htm";break 
case "00134001841303":window.location="scfsshipment0134001841.htm";break 
case "0011900181301":window.location="scfsshipment00119001.htm";break 
case "0011800181302":window.location="scfsshipment00118001.htm";break 
} 


Basically, to find out who has been scammed by these lads you can enter in the following URL 
http://www.swisscarribean.com/scfsshipment00118001.htm 
replacing the html page with the ones in the javascript 
It would seem that 26 people have fallen for the scam so far, 
well actually 25 since Lilith hasn't really fallen for it... 

A ( name of unfortunate victim ) http://www.swisscarribean.com/scfsshipment41184.htm 
fell for it first back in May. 

I wonder exactly how many of those 25 have sent money to the lads. 

Alexander Kerensky 




3. USA


-- from the redoubtable Louise Lutefisk

Hello ScamO,

Regarding the case of "JUAN PEREZ MUNOZ DE BARATA
TUDELA LOVEDAY VERSUS YET ANOTHER MRS. ABACHA & HER
LAWYER" (http://www.scamorama.com/perez.html) The
CrownSecuritiesBV.com website is pretty much a mirror
image, in text at least, of e-litebv.com which is the
purported website of another consignment company of
which I am still having an interesting exchange with a
Lad. It's not signficantly amusing yet but I will
forward it all on after it's done. The
nigerianscams.org website (when it was up) listed
other scammy front websites which the Lads use. I
wonder what happened to nigerianscams.org anyway...



2. AUSTRALIA


From:  Stew deBaker Hawke (this one's longer)


FAKE BANK WEBSITE

This one is a bit different from the usual scam letter although it
began with one. Madam Yotta also know as J. Cosmo Newbury etc put
me onto it. You can see the first mention of the bank here
http://members.optusnet.com.au/jcosmonewbery/ntales/MY12.html
but it is well worth looking at the rest of the story there as
well as the other threads if you havn't read them. Basically it is 
a fake web site pretending to be a bank. The All States Trust Bank
which from a bit of Googling seems to be a real bank in Nigeria.
This is the fake site.
http://www.allstatestrustbank.com/
So I sent them an e-mail from their contacts page as Stew de Baker Hawke
and got the following reply.
..................................................................
ATTN: Baker Hawke S

Sir,
We refer to your enquiry and wish to inform you that your request
have been granted and I have been assigned your account officer to 
quide you open an online account with our bank.
You are therefore requested to forward your fax number to me via;
ossy@allstatestrustbank.com to enable us forward to you an account 
opening form which you will be requested to fill and which will 
enable us create the account in your name.
Onbehal of Allstates Trust Bank Plc, this is welcomming you as a 
prospective client/customer.
Yours faithfully,
Ossy Olaniyi
Account officer(Customer Services Dept)
.................................................................
Naturally I mailed back.
.................................................................
Hello Ossy 
Thank you for your reply. It is a bit premature to start opening 
accounts just yet. At this stage I am just making general inquiries. 
I am interseted in your long and short term interest rates and if you 
can offer any references doing business with American companies that 
would be excellent. Also could you tell me your postal address I couldn't 
find it on the web site. If you could attach the account form  to an 
e-mail it might be worth having anyway but there is no hurry. We are an 
import export company mainly involved in manufactured goods that can be
value added by moving them around the world. For example we are looking 
at importing farm machinery into Africa. However as yet we have no plans 
to export from there. I am looking closely at that possibility though. 
Stuart de Baker Hawke 
.................................................................
The "Bank" didn't want to know.
.................................................................
Ossy olaniyi wrote:
ATTN:Baker Hawke S

Sir,
Regretably we can't be of help to you at the moment in your areas 
of interest. We suggest you try another financial institution and 
thanks once more for showing interest in our bank.
Yours faithfully,
O. Olaniyi 
Customer Services Dpt.

.................................................................
But it says on your web site that you do exactly what I need.
Please put me in touch with your superior. This is big business, 
I need to talk to a manager not a flunkey.
Stuart Hawke
.................................................................
Stuart Hawke
Sir,
Don't get mad at me. I am only carrying out instructions from my 
superiors.
Try Eco International bank via their website as stated herein 
www.ecointbankonline.com they will be of help. We do not render 
the services you required at the moment.
Ossy Olaniyi
Customer Services Dept. 
................................................................
I am not mad at you Ossy.
Get your superiors to mail me directly. I wish to comunicate with them.
Don't worry it is not about you.
.................................................................
That seemed to be the end of the exchange, but in the meantime I
found out who was hosting the website and informed them of what
was happening.
.................................................................
All States Trust Bank
80.94.192.72
(the ISP - or someone claiming to be associated with the ISP -
asked not to be mentioned)

(details omitted - it's all in RIPE.net)
........................................................

Hello (ISP guys - who never answered).
I am mailing you because I have reason to belive that Nigerian 419 
(advance fee) fraudsters are using your service to front a fake bank 
wesite. It would be this one.
www.allstatestrustbank.com 

A ping to that domain name gives an IP of   80.94.192.72 which a RIPE 
whois  lookup indicates belongs to (you) and gives your e-mail addresses.
Please bear with me here while I tell you more. First of all my name is 
NOT  Stuart Hawke I use an alias of Stew de Baker Hawke to reverse scam 
Nigerian  fraudsters as they are quite dangerous thugs and I wouldn't 
want them to know  my real name. (snipped)
Now I belive that the All States Trust Bank is a real bank and is "probably" 
located at the address below. I also think they have other branches in Nigeria.
Plot 1675, Oyin Jolayemi Street, PO Box 73018, Victoria Island, Lagos,
Nigeria. Tel: 234-1-2647031-5,
There are also some other web addresses on the internet for them but they 
don't work. www.allstates.com.ng , www.allstatesbankng.com/. Which may or 
may not have been real. However I think the site you are hosting is a front 
for a quite sophisticated fraud. These are not uncommon in that part of the 
world. I came across their web site because a friend of mine who also 
exchanges e-mails with nigeria etc mentioned it to me. You can see his 
ideas on this "bank" here.
http://members.optusnet.com.au/jcosmonewbery/ntales/MY9.html
I contacted the "bank" from it's web site and received a reply which I 
will list below (with headers) and forward to you properly after this mail. 
Next I insert a reply to a mail of mine from the friend mentioned above.
Begin Quote
--------------------------- 
Nah, I don't think the banks legit.
When you go to the 'contact us' section they ask far too many questions.  
A contact should only need to give their email for a reply.  
They wanted a lot of info.  And the first reply I got was from someone 
at @opera.com, the second was the Ossy you contacted.
The new account form is very 'iffy' and they never ask for a signature!
They are just getting smarter but not too smart.
Cheers, 
--------------------------------------------------------------------
End Quote
I realize that what I am telling you is not evidence as such but I thought 
you would like to know about it so you can research futher. I would prefer 
these people (if they are fraudsters) were reported to some approriate 
authority but I will leave that to you. If you just suspend their website 
they will only move it somewhere else. Then they will just keep conning 
people out of their money. I would be interested to hear back from you 
whatever you think or decide to do though. If you don't know much about 
this sort of thing a google search based on "Nigerian 419 fraud" will yield 
a LOT of info. Anyway I will assist in anyway I can (probably not a lot) 
and answere any questions you like. Consider though the different time zones, 
the weekend and that I don't have e-mail at home. 
Thanks
( S deB H )
Here is the reply from  www.allstatestrustbank.com 
-------------------------------------------------------------------------

X-Apparently-To: Stew deBaker Hawke via 66.163.169.93; 18 Sep 2002 
23:46:07 -0700 (PDT)
X-Track: 0: 100
Return-Path: [ossy@allstatestrustbank.com]
Received: from 80.94.192.72  (EHLO allstatestrustbank.com) (80.94.192.72)
  by mta496.mail.yahoo.com with SMTP; 18 Sep 2002 23:46:06 -0700 (PDT)
Date: Thu, 19 Sep 2002 07:50:43 +0100
From: "Ossy olaniyi" [ossy@allstatestrustbank.com]
Reply-To: [ossy@allstatestrustbank.com]
To: Stew deBaker Hawke
Subject: Response to your enquiry

 
ATTN: Baker Hawke S
Sir,
We refer to your enquiry and wish to inform you that your request
have been granted and I have been assigned your account officer to 
quide you open an online account with our bank.
You are therefore requested to forward your fax number to me via; 
ossy@allstatestrustbank.com to enable us forward to you an account 
opening form which you will be requested to fill and which will 
enable  us create the account in your name.
Onbehal of Allstates Trust Bank Plc, this is welcomming you as a 
prospective client/customer.
Yours faithfully,
Ossy Olaniyi
Account officer(Customer Services Dept) 
............................................................
I waited a few days and then as they were in Befast I informed 
the Belfast Police, Crime Stoppers (Belfast) and Scotland yard. 


I await developments
Stew and his other instantiations

(Apparently (the ISP) kicked the "Allstates" web site off.)
 



1. EUROPE



Here is a "virtual" banks agent telling me how I can claim money 
from a "virtual" bank which does not exist.The account was opened 
by Dr Oscar Duru without my knoledge.

[any errors in sequence may well be Scamorama's fault. ]

DAER Kindly Contributor,
PLEASE KINDLY SEND YOUR FAX AND TELEPHONE NUMBERS TO ENABLE ME 
SEND YOU THE INFORMATIONS YOU NEED TO ACCESS AND TRANSFER YOUR 
FUND WITH OUT PROBLEMS.

CARL SMITH

From: financier2 financier [financier2@financier.com]
To: Kindly Contributor
Sent: Tuesday, August 20, 2002 3:09 AM
Subject: Re: Fw: Fund transfer stop Order

 DEAR SIR,
 THANK YOU VERY MUCH FOR INVESTIGATING YOUR BANK, THE MONARCH INTERNATIONAL
BANK PLC IS SITUATED AT VICTORIA ISLAND LAGOS NIGERIA, THEY ARE IN GHANA ,
KENYA ETC , IF YOU ARE ACTUALY LOOKING FOR THE BANK AND NOT HOW TO GET YOUR
FUND RELEASED I WILL ADVICE YOU GO TO NIGERIA AND WALK INTO THE BANK . BUT I
WANT TO ADVICE YOU THAT YOU ARE THE ONE LOOSING, THE NIGERIA GOVERNMENT WILL
CONFISCATE YOUR MONEY.

 THANKS

 CARL SMITH

... this is the end of a long back and forth. Dr Oscar Duru ... contacted me 
to say that an account in Monarch International Bank, Lagos Nigeria had been 
opened in my name.They had got my name from the Nigerian National Oil Company 
because my company had put a bid in for some work there ( or from Equatorial 
Guinea where we are working on off shore oilfields, both facts being correct).
But the strange thing is it was in my personal name not in the name of the 
company.The Account was an online one.This was news to me but I tried to open 
the link given (monarchinternationalbankonline.com) and it did open to show as 
if it was that of a bank.When I put in the customer ID and code to access the 
account it would not display the ID.I realised the whole thing was a scam but 
could not see how it would work as the good Dr Duru called me and told me I 
should transfer some money into his account from my account in the Monarch
International Bank.Surprise, surprise he even gave me a bank account in
Singapore with all the details where his share should go.This bank is
genuine enough as I checked up from Singapore, as a matter of fact well
known.So as a curiosity I used the online bank form to transfer the requested 
amount to see what happened next.You have guessed, Nothing.Dr Duru starts 
pestering me every day as to what happened to his money.I email the bank but 
no reply.He asks me to fax the bank which I do via my computer so as not to 
reveal my fax number.I get a prompt reply to contan their agent Carl Smith to 
sort out the problem:.
"Our records indicate that your fund transfers have been stopped. 
Please contact oour Agent Mr. Carl Smith for remedial advice.
Peter Bona
Supervisor"

Ofcourse Mr Bona omits any contact details of Carl Smith.When Dr Duru rings
me again in the middle of a meeting I tell him this.Then I get this funny email.

"Dear Friend,
A bad virus attacked my computer yesterday; consequently and sadly, all
information in my files have been erased. The cause of the virus has been
trased to my former email oscarduru@fastmail.fm address, which was
deactivated immediately.

Therefore please reply to this current email address, sending me again your
LAST CORRESPONDENCE to me. Also please send me your complete address, telephone 
and fax numbers for my records.

Regards,
Dr. Oscar Duru
oscarduru@consultant.com

If he got my name address etc from the NNPC then why does he need it
again?He must have seen our letterhead there.But I play the game.

"Dear Oscar,
Sorry to hear about you virus problem.Here is the last message received from
the bank.Incidentally the e-mail address from which it came is not that
listed by the bank.It makes me wonder if the message is genuine.As you had
set up the account, you must be able to check who this Peter Bona is and
what remedial action do they require.I hope things are OK.Did you get the
attachment with the transfer requests which I sent to the bank for your
record?

"Our records indicate that your fund transfers have been stopped. Please
contact oour Agent Mr. Carl Smith for remedial advice.
Peter Bona

Supervisor"

Awaiting your reply,
M.I.Kindly Contributor"

He asks me to contact Mr Smith in London.To this I reply
"Dear Oscar,
London is a large city,so where do I find this agent and what do I discuss
with him.This is most unusual.Why can't the bank or you tell me what
remedial action to take if you want me to do so? Banks usually do not work
through Agents.Does this Agent have any office here? If so what is its
address?And what is the work of the Agent.Can you please answer this
urgently.
M.I.Kindly Contributor

----- Original Message -----
From: OSCAR DURU [oscarduru@consultant.com]
To: Kindly Contributor
Sent: Monday, August 12, 2002 8:37 PM
Subject: Urgent!


>
>  Dear Kindly Contributor,
>
> Since you live in London, why not contact this Agent in London?
>
> What are you talking about the email?
>
> Regards,
>
> Oscar"

Low and behold I am given an email address for Carl Smith.
"Dear Kindly Contributor,

His address is financier2@financier.com

Regards,

Oscar
--


I email him.His rely
"DAER Kindly Contributor,
PLEASE KINDLY SEND YOUR FAX AND TELEPHONE NUMBERS TO ENABLE ME SEND YOU THE
INFORMATIONS YOU NEED TO ACCESS AND TRANSFER YOUR FUND WITH OUT PROBLEMS.

CARL SMITH"

To this I again gave him a fax number to be retrieved by email.He then sent
me the detailed letter attached to this email.Rest assured it has been
scanned for bugs.It should open this time.Time to end this charade so I sent
this message to both Dr Duru and Carl Smith

"Dear Mr Smith.
I have a Nigerian contact called Abdul Salaami Abu Baker who is a very well
connected person in Nigeria.I am handling some confidential dussiness for
him.He has promised to sort out the whole business of blocked accounts if I
can tell him who has ordered this.Can you please send me the name of the
person/s who have reported this to the authorities and the letter from NDLEA
and FCLEN so he can follow this up.Or shall I tell him to go to the bank
himself and checkout the whole issue? An early reply would be appreciated as
Mr Abu Baker is keen to help me out for handling his affairs here.
M.I.Kindly Contributor"

Needless to say there have been no replies.Incidentally,the Monarch Internal
Bank is not listed in the list of authorised banks by the Nigerian Central
Bank or in the Bankers Almanac.It is a virtual bank.It might be worth your
effort to open their home page and see how authentic their site is.I wonder
how many people have been taken in by this.I must say the whole thing is
very realistic but for the fact we actually work in the area and I was
sceptical all along.


Had enough yet? ;>

scamorama