Another example of Email Scam "Next of Kin Scam"

The anti-419scam site 419scam.org has some interesting things to say about a scam e-mail, which you find quoted below. Check out 419scam.org here http://www.419scam.org/emails/2012-03/17/00214983.1.htm

From: "Mr.Laurens Vis" (may be fake)
Reply-To: laurens_vis@rediffmail.com
Date: Sat, 17 Mar 2012 00:00:09 +0200
Subject: From Mr.Laurens Vis!
KAS BANK.
Suite 560 Salisbury House
London Wall Broadgate London
EC2M 5NU,United Kingdom
Tel: +447031821967

Please accept my apologies if this request does not meet your personal ethics as it is not intended to cause you any embarrassment in what ever form.

I got your contact email address from the internet directory and decided to contact you for this transaction that is based on trust and your outstanding.

Dear Friend

I am Mr.Laurens Vis I work with KAS Bank here in London. With due respect and regard, I am writing you from my office that will be of immense benefit to both of us. In my department, being the Private Banking Credit Manager (Greater London Regional Office), I discovered an abandoned sum of £19,500,000 GBP (Nineteen million five hundred thousand pounds) in an account that belongs to one of our foreign customers Late Dr. Erin Jacobson, an American citizen who unfortunately lost his life and his entire family in Montana plane crash on March 23, 2009, on their way to agroup ski vacation. The choice of contacting you is aroused from the geographical nature of where you live, particularly due to the sensitivity of this transaction and the confidentiality herein. Now our bank has been waiting for any of the relatives to come-up for the claim but nobody has done that.I personally have been unsuccessful in locating the relatives for two years now, I seek your consent to present you as the next of kin/Beneficiary to

All I require now is your honest co-operation, Confidentiality and Trust to enable us see this transaction through. I guarantee you that this will be executed under a legitimate arrangement that will protect you from any breach of the law.

If you are interested in this deal, kindly send me your complete information, your full names and address, Your Private telephone and Fax numbers,Your Private email address,Your Age,Your Country,Marital Status,Your Occupation and Your Personal Mobile Number.

Having gone through a methodical search, I decided to contact you hoping that you will find this proposal interesting. Please on your confirmation of this message and indicating your interest, I will furnish you with more information.Endeavor to let me know your decision rather than keep me waiting.

Best regards,
Mr.Laurens Vis
Tel: +447031821967

Scammer continues with deceased family member fraud

A scammer is continuing to spam email accounts with messages that some deceased family member has had an account in KAS BANK. (KAS BANK does not have private customers, this bank only works for wholesale institutions).

The scammer would be more than happy to transfer the balance - usually $18,500. However, if you reply to these spam emails, you will be asked to pay upfront fees.

Also, the scammer will try to get his hands on your personal data, banking and credit card information.

Remember that serious established financial institutions never ask for information through email, nor do they communicate such information through email. Let alone sent from some gratis email account.

Example of E-mail Scam

The technical information about the e-mail shows interesting details about the origin of the scam e-mail (see the line in red!). Naturally Dr. Frigns is no employee of KAS BANK and naturally, kasbank.co.uk is not a web presence of Amsterdam based KAS BANK N.V. (See www.kasbank.com).

The contents of the email (below, in blue) would make anybody laugh!

Return-Path: jmgfrigns@kasbank.co.uk
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7760) with LMTPA;Wed, 07 Mar 2012 03:34:40 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='iso-8859-1'
X-Mail-from: jmgfrigns@kasbank.co.uk
Received: from mx3.nyi.mail.srv.osa ([10.202.2.202])
by compute1.internal (LMTPProxy); Wed, 07 Mar 2012 03:34:40 -0500
Received: from mail.healingourspirit.org (mail.healingourspirit.org [209.52.170.114])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx3.nyi.mail.srv.osa (Postfix) with ESMTPS id 320B44C27A7
Wed, 7 Mar 2012 03:34:39 -0500 (EST)
Received: from mail.healingourspirit.org (localhost.localdomain [127.0.0.1])
by mail.healingourspirit.org (8.13.8/8.13. with ESMTP id q278KHnr027425;
Wed, 7 Mar 2012 00:20:17 -0800
Received: (from apache@localhost)
by mail.healingourspirit.org (8.13.8/8.13.8/Submit) id q278KEdt027424;
Wed, 7 Mar 2012 00:20:14 -0800X-Authentication-
Warning: mail.healingourspirit.org: apache set sender to jmgfrigns@kasbank.co.uk using -f
Received: from 184.75.218.254(SquirrelMail authenticated user info)
by 209.52.170.114 with HTTP;Wed, 7 Mar 2012 00:20:14 -0800 (PST)
Message-ID: 56070.184.75.218.254.1331108414.squirrel@209.52.170.114
Date: Wed, 7 Mar 2012 00:20:14 -0800 (PST)
Subject: Business ProposalFrom: "Dr J.M.G Frigns" jmgfrigns@kasbank.co.uk
Reply-To: jmgfrigns@live.ca
User-Agent: SquirrelMail/1.4.8-4.0.1.el5.centos.2
MIME-Version: 1.0Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bitX-Priority: 3 (Normal)
Importance: NormalX-Truedomain-Domain: kasbank.co.uk
X-Truedomain-SPF: Neutral (mx3: 209.52.170.114 is neither permitted nor denied by domain of kasbank.co.uk)
X-Truedomain-DKIM: No Signature
X-Truedomain-ID: F4375F6BD8B43CA40F7B4AED2DD111A5
X-Truedomain: Neutral

Hello Friend,

My name is Dr. J.M.G Frigns

I have a Business Proposal of $35,500,000.00 (Thirty Five Million Dollars) for you to handle with me from my bank.

Please kindly keep this secret, I believe you will not betrayed me with the trust i intend putting on you. If you disregard this email, you might just be loosing a life time opportunity, and last relationship between us

If interested do contact me on my email: (jmgfrigns@live.ca) for more details.

Thank you

Even more 'advanced' website copy

Here is http://www.kasbank.kass-nb.com/. Can't follow this link, because the website was taken down. It was a fraudulent mirror copy from the official website http://www.kasbank.com/.

This is even more advanced than the simple HTT Track mirror copy, as it has a button Online Banking added. This would typically lead to another site, where the visitor is tricked out of his money.

'Advanced' fraudulent website copy?

Here is an example of an 'advanced' website copy.



It is www.kasbankuk.com. However, there is no KAS BANK UK. And sorry, the link doesn't work, the website was taken down. As you can see from this snapshot, it seems like a perfect copy of www.kasbank.com - the official site of an established bank.

So is this an 'advanced' fraudulent website copy? It might seem so, but let's take a look at the source code that tells your browser what to show. What do we read in the comments marked green?



Indeed, it is a mirror copy, made by standard software, meant to read websites offline.

Naturally, interactions go wrong with such a frozen copy: the contact form on this one did not work.

Scammer uses Turkish bank account to extract fraudulent fees

Dear Sir, I have received an email last week from KAS Bank contains an information regarding late father's account and they need the Next of Kin information, they also need fees to transfer the amount of $3,150, Nevertheless they asked that the amount should be paid in cash in the central bank of turkey. The father's late account bank is in turkey. Is your bank affiliated with any banks in turkey? Inaddition they sent me the details how to log in the late father's account with the user name, digipass and the pin, and was working. Please Avice. Thanks

Answer: your father cannot have had an account with KAS BANK, as this bank has no private account holders. Someone is trying to rip you off!

Scammer doesn't stop at deceased to trick people out

I have recieved an email from KAS bank regarding Late Father's Account and my fiance and i are the Next of Kin. requesting me to fill late Father's information and my bank information should i trust it? and is ING Bank affiliated with KAS Bank? Please Advice. to proceed to the next step. Thanks and Best Regards

The answer to these questions is: no and no.

1. Never trust any e-mail that prompts you to give banking information. No bank will ask you for such data per e-mail.

2. KAS BANK is in no way affiliated with ING Bank.