Finance Corp International Inc. Fraud
(Professional Escrow Service)
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
Finance Corp International Inc. Fraud (Professional Escrow Service) screenshot: 13th. Jan 2009
Finance Corp International Inc. Fraud (Professional Escrow Service) screenshot: 13th. Jan 2009
This fraud should not be confused with any other company of the same or similar name - the above website screenshot and the following fraud evidence define and refer to this fake company alone and no other.

Finance Corp International Inc. (Professional Escrow Service) is just another fake financial site used as a vehicle for money laundering fraud and phishing for personal details as part of the recruitment process. It appears to be the follow-on fraud from the now shut down Finance Shine International fraud. As is usual with these criminals, they claim to have been in operation for years, but their website domain(s) were only registered in the last week or two and they have an easily recognisable pedigree, (see the Logic Group fraud for some of their dozens of previous aliases based on their fake UK address of 81 holland road, London), along with fake location details and fake imagery. 13-Jan-2009 - The criminals have added the name Professional Escrow Service to the title and the page footer, but the website and the fraud remain the same.
Evidence of Criminal Fraud:

i) From the above home page: "Finance Corp International Inc. was found in New York, 2004". However, the fraudster's latest domain finltdescrow.org was only registered with Bizcn, Inc. on 11-Nov-2008. Later domains to replace suspended ones listed below. Clear evidence of fraudulent misrepresentation.

ii) A Google search for "Finance Corp International Inc" shows that they have no internet presence at all apart from their own website and numerous listings on various fraud sites.

iii) The website carries the following clear money mule criminal solicitation under the 'Vacancies' tab:
Transactional operator-escrow agent:

As the basis of our service is to provide escrow deals on the Internet we need escrow agents all over the world. Attracting clients from different corners of the world we should have our agents everywhere so that to be able to provide instant escrow solutions (in-state bank transfers take no more than a few hours). We engage new technologies to deal with the e-document exchange, which make the process reliable and safe. Our service only deals with the paperwork, leaving the financial part (accepting funds on your personal bank accounts from the buyers, and routing them to the sellers according to our instructions afterwards) for you. We can't shoulder the financial responsibility because in today's world of extremely fast solutions it is time that is of extreme importance to our clients. Having an escrow agent in every country we can quickly transfer funds inside the country without wasting time on the international bank transfers, and continue our rapid growth rather than overwhelming our own bank account with inbound and outbound transactions leading to severe hold times and probably service interruption.

If you want to build up an escrow agent career with us register on our home page. Your main task will be accepting money transactions on your personal bank accounts and routing them to other bank account of the escrow process, according to our instructions. You will benefit from the commissions, which are 5-7% of every transaction and depend on the quantity of completed transactions and the speed of your work. For your convenience there will be no paychecks, your commission will remain in your account, which is activated after your registration, after every successfully completed transaction. The cost of money transfer is not included in your commission, meaning you will deduct it from the amount to be sent, not your commission. And you receive 5-7% of the amount of the transaction. Normally the amounts that we process vary from $5,000 to $35,000, but can go higher on special occasions.

Types of Transactions

The main type of escrow transactions as far as the financial part is concerned are direct bank transfers, cheques and wire transfers . There is one more way - to deal with the old-fashioned checks, but we are cautious about it and usually require upfront approval from you before proceeding with this method. So in brief, you can make money transfer of any type of listed above.

In case you refuse to incorporate, feel free to use your personal accounts for check-enabled escrow transactions (where the buyer remits payment to escrow via personal or corporate check). Please note escrow service will only proceed once the check clears and the hold will be removed from the check amount by your bank for complete and unrestricted use of deposited funds!

Money transfer methods to our clients:

    * Western Union;
    * Money Gramm;
    * Wire transfer to your banking account or check (preferred method);

Taxation

According to USA & UK laws you are not required to pay taxes on bank transactions. In addition to that, generally you will not have to do your work under your own name, but the name of your company. If you insist we can prepare and file all tax documents with the IRS at the end of fiscal year.
iv) You do not get a much clearer definition of the illegal part time money mule function "accepting funds on your personal bank accounts from the buyers, and routing them to the sellers according to our instructions afterwards" via Moneygram or Western Union less a percentage commission - that on its own defines the company without doubt as criminal and bogus and is clear evidence of criminal fraud. Not only that, but there is a clear incitement to tax evasion by the false statement "According to USA & UK laws you are not required to pay taxes on bank transactions."

v) No legitimate company is going to advertise for this sort of illegal part time, 'work from home' money transfer position among the untrained, inexperienced and uncertified general population overseas.

vii) Fake 'Contact Us' Details from website:

First of all there is this stolen image:
group photo

That is a picture of Helmut Kneth and staff of the German manufacturer of the XSOX disability aids, (1-2-3 Kneth GmbH - as is clearly visible on the certificate), receiving a product recognition award and the image has been stolen from here, i.e. nothing to do with the Finance Corp International Inc. fraudsters at all. Clear evidence of criminal deception.

Then there's the following contact details:

USA Headquarters address

4470 N Chase Blvd, Montgomery, AL 36110 ,USA

UK Headquarters address

81 holland road, London, London, nw105at, United Kingdom

• - The US address of 4470 N Chase Blvd, Montgomery, AL 36110 ,USA Googles as the address of the Days Inn Hotel and certainly not these crooks - clear evidence of criminal fraud.

• - The UK address of 81 holland road, London, London, nw105at, United Kingdom is actually listed in UK Companies House as the registered address of a company called HONEY'S DESIGN & CONSTRUCTION LIMITED (Company No. 05416580). In other words it's a fake address. It's also the same address used for the Epayment Solutions, Emarket Solutions Inc., Legal Operations Inc., Secure Operations Inc., Ketler Group Inc., Oranta Group Inc., and the Profit Financing Inc. frauds among others - clear evidence of criminal fraud.

viii) They are not registered as a business in the US state of Alabama. Check for yourself. Clear evidence of a fake company.

ix) They are not registered at the UK Companies House or with the UK Financial Services Authority which they would have to be to be able to legally trade in the UK. Check for yourself. Clear evidence of a fake company.
x) The Spam (see the ***latest news*** for recent spam)
Good morning !

I'm Oliver Prahm, Manager of Finance Corp International Inc . I have found your resume and want to offer you the vacancy of
"Account Manager".

1 - We do not require payment from you for anything, this is a job.
2 - This is a commission based job, you are paid based on performance.

    Job description:
    The major duty of the "Account Manager" is to process payments between our clients and our company via Direct bank
transfer. You will get 7 percent per transfer.

    Salary: 500 dollars - 3500 dollars per month.

    Benefits of this vacancy:

       1. Flexible work schedule, work 3-5 hours per week.
       2. Possibility of your career rising.
       3. Home-based.
       4. Ability to take unlimited vacation (without guaranteed salary).

    Minimal requirements:

       1. You must have bank account.
       2. At least 18 years old.
       3. Internet and Email skills.

If you need more information ...
If you want to apply for this job ...
If you’ve got some questions about this vacancy ...

Write here (e-mail) : financecorp@email.su

   Best regards

   Oliver Pram
   Administrative Director
   Finance Corp International
In other words a completely standard money mule solicitation spam typical of the millions flooding the internet every day. Clear evidence of criminal fraud. Notice that the fake "Administrative Director" starts off as "Oliver Prahm, Manager of Finance Corp International Inc" and ends up as "Oliver Pram, Administrative Director, Finance Corp International".
xi) They also appear to have the following email based version of the spam on the go:
Good morning !
I'm Juhan Parts , Manager of Finance Corp International Inc . I have found your resume and want to offer you the vacancy of "Account Manager".
1 - We do not require payment from you for anything, this is a job.
2 - This is a commission based job, you are paid based on performance.
Job description:
The major duty of the "Account Manager" is to process payments between our clients and our company via Direct bank transfer. You will get 6 percent per transfer.
Salary: 1400 dollars - 3500 dollars per month.
Benefits of this vacancy:
1. Flexible work schedule, work 3-5 hours per week.
2. Possibility of your career rising.
3. Home-based.
4. Ability to take unlimited vacation (without guaranteed salary).
Minimal requirements:
1. You must have bank account.
2. At least 18 years old.
3. Internet and Email skills.
If you need more information ...
If you want to apply for this job ...
Write here (e-mail) : fininteck@gmail.com
The above evidence clearly demonstrates beyond any doubt that the Finance Corp International Inc. website has been set up very recently by money laundering criminals purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal activity - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.
 
Known Website Domains

financeescrow.info
financeescrow.org
escrowus.biz
escrowusa.info
fcii.biz
fininternational.org
finltdescrow.org
solutionescrow.net
escrowdealinc.com
financedeal.biz
onlinesolution .info
solutiononline.co.cr
finance-corp.biz

 Registrar

Enom Inc - 30-jun-2008
Register.com Inc. - 10-Jul-2008
ENOM, INC. - 02-Sep-2008
ENOM, INC. - 08-Sep-2008
ENOM, INC. - 14-Oct-2008
ENOM, INC. - 28-Oct-2008
BIZCN.COM, INC. - 11-Nov-2008
ENOM, INC. (Rustelekom) - 27-Nov-2008
ADVANTAGE INTERACTIVE LTD (06-Dec-2008)
ENOM, INC. - 19-Dec-2008
ENOM, INC. - 28-Jan-2009
Nic.cr - 17-Feb-2009
Directi/Publicdomainregistry.com - 16-Jul-2009

 
Criminal Registered
Nameserver Domains

arns.cc
argns.cc
ar2ns.cc
agns.co.cr
bdns.co.cr
egns.vg

 Registrar


BIZCN.COM, INC. - 27-mar-2008
ENOM, INC. (Rustelekom) - 26-jul-2008
PUBLICDOMAINREGISTRY.COM - 23-Jun-2008
NIC.CR - 22 Sep 2008
NIC.CR - 14 Nov 2008
Adams Names/Register.com, Inc. - 24-Jul-2008

Active
Suspended/Disabled
Parked
Network Data

(Valid for domains financeescrow.info, financeescrow.org)
Domain Type TTL Answer
financeescrow.info. NS 86400 ns4.arns.cc.[190.183.63.104]
financeescrow.info. NS 86400 ns3.arns.cc.[190.183.63.103]
financeescrow.info. A 14400 190.183.63.103

The host for this one is Outservices.net on IP 190.183.63.103 using nameservers ns1.arns.cc and ns2.arns.cc on their IPs as well. This is the same host and nameservers as used by the Electronic Payment Services, Inc. fraudsters, Business Care fraudsters and no doubt others.
Fraud Log

10th. July 2008
Webpage created
***Latest News*** 10th. July 2008 - message from site contact  - domain financeescrow.info has been suspended
***Latest News*** 15th. July 2008 - message from site contact  - new domain financeescrow.org - same network as above.
***Latest News*** 7th. September 2008 - message from site contact  - new domain escrowus.biz.  The criminal registered nameserver domain arns.cc has been suspended by Biz.cn or their reseller and the criminal has registered a new nameserver domain, (argns.cc) with Rustelekom.

Network Data (Valid for domain escrowus.biz)

How I am searching:

Searching for escrowus.biz A record at l.root-servers.net [199.7.83.42]: Got referral to e.gtld.biz. (zone: biz.)
Searching for escrowus.biz A record at e.gtld.biz. [209.173.58.65]: Got referral to NS2.ARGNS.CC. (zone: escrowus.biz.)
Searching for escrowus.biz A record at NS2.ARGNS.CC. [190.183.63.57]: Reports escrowus.biz. Response:
Domain Type Class TTL Answer
escrowus.biz. A IN 14400 190.183.63.56
escrowus.biz. NS IN 86400 ns1.argns.cc.
escrowus.biz. NS IN 86400 ns2.argns.cc.
ns1.argns.cc. A IN 14400 190.183.63.56
ns2.argns.cc. A IN 14400 190.183.63.57

Looking up at the 2 escrowus.biz. parent servers:

Server Response
ns2.argns.cc [190.183.63.57]  190.183.63.56
ns1.argns.cc [190.183.63.56]  190.183.63.56

The criminal is still hosted by Outservices.net on a new IP, (190.183.63.56), using a replacement criminal registered nameserver domain (argns.cc) registered with Enom Inc. (Rustelekom).
***Latest News*** 9th. September 2008 - message from site contact  - the domain escrowus.biz has been suspended along with nameserver argns.cc.  The criminal is now using a new domain escrowusa.info and a new nameserver domain ar2ns.cc

Network Data (Valid for domain escrowusa.info)

How I am searching:

Searching for escrowusa.info A record at j.root-servers.net [192.58.128.30]: Got referral to C0.INFO.AFILIAS-NST.info. (zone: info.)
Searching for escrowusa.info A record at C0.INFO.AFILIAS-NST.info. [199.254.49.1]: Got referral to ns1.ar2ns.cc. (zone: escrowusa.info.)
Searching for escrowusa.info A record at ns1.ar2ns.cc. [190.183.63.56]: Reports escrowusa.info. Response:
Domain Type Class TTL Answer
escrowusa.info. A IN 14400 190.183.63.56
escrowusa.info. NS IN 86400 ns2.ar2ns.cc.
escrowusa.info. NS IN 86400 ns1.ar2ns.cc.
ns1.ar2ns.cc. A IN 14400 190.183.63.56
ns2.ar2ns.cc. A IN 14400 190.183.63.57

Looking up at the 2 escrowusa.info. parent servers:

Server Response
ns2.ar2ns.cc [190.183.63.57]  190.183.63.56
ns1.ar2ns.cc [190.183.63.56]  190.183.63.56

The criminal is still hosted by Outservices.net on IP 190.183.63.56 using a replacement criminal registered nameserver domain (ar2ns.cc) registered with ESTDOMAINS, INC.
***Latest News*** 23rd. September 2008
Notification from site contact - domain escrowusa.info has been suspended. Please notify me of any active websites/domains.
***Latest News*** 21st. October 2008
Notification from Frank Bear - new domain fcii.biz registered with Enom Inc. (14-Oct-2008) and hosted on the following Outservices network:

How I am searching:

Searching for FCII.BIZ A record at d.root-servers.net [128.8.10.90]: Got referral to C.GTLD.biz. (zone: biz.)
Searching for FCII.BIZ A record at C.GTLD.biz. [209.173.60.65]: Got referral to NS2.AGNS.CO.CR. (zone: fcii.biz.)
Searching for FCII.BIZ A record at NS2.AGNS.CO.CR. [190.183.63.57]: Reports fcii.biz. Response:
Domain Type Class TTL Answer
fcii.biz. A IN 14400 190.183.63.56
fcii.biz. NS IN 86400 ns2.agns.co.cr.
fcii.biz. NS IN 86400 ns1.agns.co.cr.
ns1.agns.co.cr. A IN 14400 190.183.63.56
ns2.agns.co.cr. A IN 14400 190.183.63.57

Looking up at the 2 fcii.biz. parent servers:

Server Response
ns2.agns.co.cr [190.183.63.57] 190.183.63.56
ns1.agns.co.cr [190.183.63.57] 190.183.63.56

The criminal has also registered a new nameserver domain agns.co.cr with NIC.CR (22-Sep-2008). The host for this criminal is still the usual Outservices.net on IP address 190.183.63.56
Later - Notification from Simon Bear - domain fcii.biz has been suspended. Please notify me of any active websites/domains.
***Latest News*** 3rd. November 2008

Information from Frank Bear - new domain fininternational.org hosted on the above network.
Later: That didn't last long - message from Simon Bear - domain fininternational.org is no more.... Please notify me of any active domains.
***Latest News*** 21st. November 2008
Information from Frank Bear - new domain finltdescrow.org hosted on the following network:
How I am searching:

Searching for finltdescrow.org A record at j.root-servers.net [192.58.128.30]: Got referral to A0.ORG.AFILIAS-NST.INFO. (zone: org.)
Searching for finltdescrow.org A record at A0.ORG.AFILIAS-NST.INFO. [199.19.56.1]: Got referral to ns1.ar2ns.cc. (zone: finltdescrow.org.)
Searching for finltdescrow.org A record at ns1.ar2ns.cc. [190.183.63.56]: Reports finltdescrow.org. Response:
Domain Type Class TTL Answer
finltdescrow.org. A IN 14400 190.183.63.56
finltdescrow.org. NS IN 86400 ns2.agns.co.cr.
finltdescrow.org. NS IN 86400 ns1.agns.co.cr.
ns1.agns.co.cr. A IN 14400 190.183.63.56
ns2.agns.co.cr. A IN 14400 190.183.63.56

Looking up at the 2 finltdescrow.org. parent servers:

Server Response
ns1.ar2ns.cc [190.183.63.56]  190.183.63.56
ns2.ar2ns.cc [190.183.63.58] Timeout

The host for this fraudster is still the usual Outservices.net on IP address 190.183.63.56
***Latest News*** 8th. December 2008
Domain finltdescrow.org has been disabled, also domains escrowdealinc.com and solutionescrow.net - please inform me of any active domains.
***Latest News*** 13th. January 2009

The criminals have added the name Professional Escrow Service to the title and the page footer, but the fraud remains exactly the same. New domain notified by Frank Bear - financedeal.biz hosted on the following network:

How I am searching:

Searching for financedeal.biz A record at k.root-servers.net [193.0.14.129]: Got referral to d.gtld.biz. (zone: biz.)
Searching for financedeal.biz A record at d.gtld.biz. [213.86.51.129]: Got referral to NS1.BDNS.CO.CR. (zone: financedeal.biz.)
Searching for financedeal.biz A record at NS1.BDNS.CO.CR. [115.126.5.51]: Reports financedeal.biz. Response:
Domain Type Class TTL Answer
financedeal.biz. A IN 14400 115.126.5.50
financedeal.biz. NS IN 14400 ns2.bdns.co.cr.
financedeal.biz. NS IN 14400 ns1.bdns.co.cr.
ns1.bdns.co.cr. A IN 14400 115.126.5.50
ns2.bdns.co.cr. A IN 14400 115.126.5.51

Looking up at the 2 financedeal.biz. parent servers:

Server Response
ns2.bdns.co.cr [115.126.5.51] 115.126.5.50
ns1.bdns.co.cr [115.126.5.51] 115.126.5.50

The host of this criminal fraudster is First Network Communications Limited, (ISP at HK) on IP address 115.126.5.50
***Latest News*** 19th. January 2009
Information from Simon Bear - the domain financedeal.biz has been suspended - please notify me of any active domains for this criminal.
***Latest News*** 31st. January 2009
There is currently a large spam run in progress from these criminals referring to the new domain onlinesolution.info Here is an example:
'Atis Slakteris' <escrowus@gmail.com>

We have received your e-mail . An Bank account manager makes 6% from the amount of each transaction. You will be granted 24/7 support and back up from our company in case of emergency throughout the business hours. A secure online environment makes the work of an account manager agent easier. Normally the amounts that we process vary from $4,000 to $10,000, but can go higher on special occasions.

Working Tasks?

1) To receive money to your bank account
2) Withdraw funds.
3) Send money via Western Union or Money Gram

To get job details go to this link: onlinesolution.info

 Also we sent our contract, for the further cooperat ion. Please fill it and send to us a copy, to prove your identity. Also it is necessary to send acknowledgement, that you are ready to work by e-mail. After receiving your email we process and answer as soon as possible.

Best Regards

Atis Slakteris

Finance Corporation International
The above is a clear illegal 'Money Mule' solicitation and defines the Finance Corporation International fake company as both criminal and fraudulent. Do not be tempted - the funds are fake/stolen and you will end up losing a lot of money, having your accounts and your assets frozen and receiving a visit from the police.
DNS Data (Valid for onlinesolution.info)

How I am searching:

Searching for onlinesolution.info A record at k.root-servers.net [193.0.14.129]: Got referral to d0.info.afilias-nst.org. (zone: info.)
Searching for onlinesolution.info A record at d0.info.afilias-nst.org. [199.254.50.1]: Got referral to ns2.bdns.co.cr. (zone: onlinesolution.info.)
Searching for onlinesolution.info A record at ns2.bdns.co.cr. [115.126.5.51]: Reports onlinesolution.info. Response:
Domain Type Class TTL Answer
onlinesolution.info. A IN 14400 115.126.5.50
onlinesolution.info. NS IN 14400 ns1.bdns.co.cr.
onlinesolution.info. NS IN 14400 ns2.bdns.co.cr.
ns1.bdns.co.cr. A IN 14400 115.126.5.50
ns2.bdns.co.cr. A IN 14400 115.126.5.51

Looking up at the 2 onlinesolution.info. parent servers:

Server Response
ns1.bdns.co.cr [115.126.5.50] 115.126.5.50
ns2.bdns.co.cr [115.126.5.51] 115.126.5.50

This is the same network as previously used - the host is HKNTCM-291-091PVT (hknetcom.biz) on IP address 115.126.5.50
***Latest News*** 3rd. February 2009
Information from Simon Bear - the domain onlinesolution.info has been suspended by the registrar - please notify me of any active domains for this criminal.
***Latest News*** 12th. March 2009
New domain notified by site contact - solutiononline.co.cr, registered with nic.cr and hosted on the following network:

How I am searching:

Searching for solutiononline.co.cr A record at c.root-servers.net [192.33.4.12]: Got referral to NS-CR.RIPE.NET. (zone: cr.)
Searching for solutiononline.co.cr A record at NS-CR.RIPE.NET. [193.0.12.55]: Got referral to ns1.egns.vg. (zone: solutiononline.co.cr.)
Searching for solutiononline.co.cr A record at ns1.egns.vg. [196.2.198.241]: Reports solutiononline.co.cr. Response:
Domain Type Class TTL Answer
solutiononline.co.cr. A IN 14400 196.2.198.241
solutiononline.co.cr. NS IN 14400 ns1.egns.vg.
ns1.egns.vg. A IN 14400 196.2.198.241

The host of this criminal's domain solutiononline.co.cr is the usual EG-Net of Cairo on IP address 196.2.198.241 using the criminal registered nameserver domain egns.vg
***Latest News*** 11th. September 2009
The solutiononline.co.cr domain has now been disabled, but new domain reported for this long-lived crook by Frank Bear - finance-corp.biz hosted on the following network:
DNS Lookup: finance-corp.biz A record
Searching for finance-corp.biz A record at f.root-servers.net [192.5.5.241]: Got referral to C.GTLD.biz. (zone: biz.)
Searching for finance-corp.biz A record at C.GTLD.biz. [209.173.60.65]: Got referral to NS2.ECHO-HOST.COM. (zone: finance-corp.biz.)
Searching for finance-corp.biz A record at NS2.ECHO-HOST.COM. [80.90.118.49]: Reports finance-corp.biz.
Response:
Domain Type Class TTL Answer
finance-corp.biz. A IN 14400 80.90.114.49
finance-corp.biz. NS IN 14400 ns1.echo-host.com.
finance-corp.biz. NS IN 14400 ns2.echo-host.com.
ns1.echo-host.com. A IN 14400 80.90.114.49
ns2.echo-host.com. A IN 14400 80.90.118.49

Looking up at the 2 finance-corp.biz. parent servers:

Server Response
ns2.echo-host.com [80.90.118.49] 80.90.114.49
ns1.echo-host.com [80.90.114.49] 80.90.114.49

The host of this criminal fraudster is Smartlogic.ru on IP address 80.90.114.49.