Finha Capital OY (Stolen Identity) Fraud

Don't Bear Internet Fraud

This fraudster should not be confused with any legitimate company of the same or similar name - the following website graphics and the evidence of fraud clearly identify the fake Finha Capital OY website, these criminal fraudsters and no other company. The company identity has been stolen from a genuine company of the same name and the website content has also been stolen from a legitimate payments processing service.

Finha Capital OY (Stolen Identity) scam screenshot (17-Apr-2010)

Finha Capital OY (Stolen Identity) This is just a standard serial Russian scam website that has been set up to form a front for a money laundering job advertisement. The MO, the stolen website content, the identical FAQ page, the Finnish location, the use of a robots.txt file, the registrar and the use of the freedns.ws nameservers clearly link this fraudster to the 'Medical Payments' and their associated fraudsters, including Diamond-Exchange Inc., Silver Services Inc., Active Solutions Inc., Silver Finance Inc. and latterly Platinum Funds., Webeca Payments Inc., Neweca Payments Inc., Med Payments Inc., Paymate Solutions Inc., Den Payments Inc., My Health Direct Inc., Medical Direct Inc., Medical Finance Inc., World Medical Payments Inc., Medical Payments Inc., Med Finance Flow Inc., Medical Payment Solutions Inc. (Stolen Identity), CentroMed Finance Inc., Healthcare Payments Inc., MedFinance Inc. and Noir Medical Inc. (Stolen Identity), V-Medical Payments Inc., MyMobile Medical Inc. and Smith Medical Inc. and Allegro Medical Inc. (Stolen Identity) and Quantel Medical Inc. (Stolen Identity) - this is quite clearly a prolific serial Eastern European fraudster with numerous previous linked aliases. The 'Medical Payments' scammers domain whois details also directly link the above crooks to the 'kneber' botnet, (see the Quantel Medical Inc. (Stolen Identity) scam), and other fraudsters including 24 Hour Express Service, Crampton Investments, and Proteus Solutions. See This Washington Post article by Brian Krebs for background information on these criminals in general. There are two other identical current aliases for these criminals, they are Contant OY and BIN FINANCE OY - this is clearly a serial fraudster. Grateful thanks to Kimmo bear in the Finnish branch for the heads-up and his painstaking research on this scam. An examination of the source code shows Russian tags to the Joomla CMS the crooks use and the XML language set is Russian.

Finha Capital OY (Stolen Identity) : Evidence of Criminal Fraud

i) The criminal's site content is stolen page-for-page from this long established genuine payments processing company, so any claims on the fake site are irrelevant to these crooks. Clear evidence of site theft and misrepresentation.

ii) Any claims of an established service on the above stolen website are complete nonsense as the criminal's website domain finha-capital.com was only registered with Bizcn.com, Inc. (R1248-LROR) on 02-Apr-2010 for the usual 'criminal's domain' minimum period of only one year and the whois details have been masked by the usual 'privacy protect' system which would make no sense for a legitimate company. A clear indication of a fraud domain.

iii) The criminal makes use of a 'robots.txt' file in 'disallow' mode to prevent any search engine from 'seeing' the website content - no genuine company would do that - clear evidence of a fake company.

iv) These criminals are identical to the 'Medical Payments' fraudsters in the following respects: The same payment processing MO, the identical FAQ page, (below), the stolen site content, the Finnish location, the use of a robots.txt file, the same domain registrar and the same freedns.ws nameservers. It is undoubtedly the same fraudsters. This Washington Post article details the criminal activities of the 'Medical Payments' criminals.

v) They have stolen the identity of a genuine registered Finnish company of the same name. This fact has been confirmed in writing bythe Finnish company owner, (they do not have a website). Thanks to Kimmo Bear of the Finnish branch for contacting the real company - irrefutable evidence of fraud.

vi) A Google search shows absolutely no internet presence at all for the website content for this particular fake "Finha Capital OY", (just their website address), which is not surprising as the criminals are using a robots.txt file to block all search engine access to their website - only a fraudulent website would do that. Not to be confused with the real company of the same name.

vii) Fraud Website Contact Details

Contact us today!

***These contact details have been stolen from the genuine Finha Capital Oy company and so have been converted to an image***

Stolen Finha address details

vi) The Job Spam:

Hire Manager" <sajeevkurup23@gmail.com

Our Organization have found your resume in HotJobs database, reviewed it and consider you to be a great candidate for this position which we offer.
Our company are now looking for a few qualified persons for a vacant position "Account Coordinator".

The main task of this position is collecting payments (wire transfers and checks ) from our customers in United States.
If you don't have bank account, our manager will help you to open a new one.

Average salary is $600-$800 per week.

Basic Requirements:

- Computer skills (MS Word), personal e-mail address
- Age: 21+
- Ability to work at home
- US Citizenship
- Responsibility

http://finha-capital.com/rim/?link=getjob&rnd=1579372

ALL FEES PAID BY US

vii) If you are not convinced of the illegal nature of the above fake job and require a few questions answered, here's the FAQ from their website:

# Why does your Company require Financial Managers ?

As far as we make transactions with help of individual Financial Managers via Instant Money Transfer Systems, such as Western Union or Money Gram, we avoid imposition of taxes on our funds. To put it in simpler words, we pay taxes to our local authorities before funds are transferred to your bank account. In addition, it is not required to indicate these profits in your tax declaration. However, if you prefer to pay taxes by your own means, it is not restricted (contact our support service to get additional information). But you should note that transactions marked as “commercial” have a smaller volume and require more time and efforts to be processed. This is why we always recommend our Managers to indicate these transfers as “personal”, as if they were forwarded to your friend or relative.

# Where can I get my check cashed-out ?

1) You cash-out your check in Wal-Mart stores for a small fee
2) ACE Cash Express - www.acecashexpress.com
3) You cash-out your check in some grocery and retail stores
4) Speedy cash - www.speedycash.com
5) Advance America Cash Advance - http://www.advanceamerica.net/
6) You cash-out your check in your bank or in the bank which has issued that check.

Our company will undertake for the all check-cashing fees.

# Describe my duties and responsibilities. Why don't you make your transactions by your own means and reserve the commission ?

Once our customer has made a payment to your bank account or sent you a check, you will have to visit your bank and get this money cashed-out. As soon as you get cash exceeding $2,000 you might proceed to the final step. In order to complete transaction you will have to visit Money Gram or Western Union office. Sometimes it is required to transfer money via Wire Transfer Systems instead of Instant Money Transfer Systems. We will provide you with full receiver’s information for every transaction.

Our company is engaged in the business of medical payment processing. Average order amounts USD 100-300. Some of our customers prefer to pay by checks.
When our customer forwards a check to our office in Helsinki, Finland, it usually takes 7 days to be delivered to us, through a complex logistics system.
It also takes much money and time for us to cash-out US check here, in Finland.
If our customer prefers to make payment for orders via Western Union, the transaction becomes very expensive. For small-sized orders of $100-300 the commission fee of Western Union amounts $15-40.
However, the transfer of $2,500 costs just about $125.

For example, if our customer has several orders to be transferred, the separate transfer of them would amount ~ $375.
But single transfer of $2,500 would amount just ~ $125, three times less.
That’s why our customers send payments directly to Finland once the total sum reach value of $3,000.
This transaction system allows us to make our payments faster, make a higher commission for our employees and, at the same time, to earn money.

# How many transfers per day/week/month will I process ?

It depends on the quantity of the orders. It may vary from one transfer per week to several transfers per day. We will inform you of the number of transfers beforehand, as well as of the transfers sent to you.

# When will my commission be increased from 8 % instead of 6 %? What are my perspectives for the career growth?

Initially the commission for all our employees amount 6 %. Further, once you will open an individual checking account for this job, the commission will be increased to 8 %.

# Can I invite my friends? [They won't be your friends for long if you do....]

Yes, of course.

# In what currency should I receive the money? In what currency it should be sent? Is there any necessity to exchange the currency ?

In most cases we make payments in US dollars. You will have to send money in the same currency which you have received. There is no necessity to exchange the currency.

# Who undertakes for compensation of transfer commission? Isn't it too expensive to use Instant Money Transfer Systems, such as Western Union or MoneyGram? Will it be deducted from my commission?

Our company will undertake for all the costs related with money transfers. Absolutely nothing can be deducted from your commission; your commission will be exactly equal to the agreed one (during the first month your commission will amount 6 % of total transfers made via your account).

# You asked to send my ID by fax message, but it doesn’t operate. What should I do?

Our fax is always online, so it seems that the problem is in your fax. If you can't fax your ID, you still might scan it and send it via e-mail. If you do not have a scanner you can visit your nearest cyber cafe for help.

# I want to get your company's contract sealed and signed by CEO.

We shall provide it to you at your first request.

# Is it legal? [Of course it isn't - Ed.]

Yes, our business is absolutely legal. We have documentation which proves it.

# I don't have higher education degree in financial sphere, is it important ?

No, you can learn how to work with transfers. We are always ready to help you.

# Do you work in the USA only ?

We work with major countries round the whole world.

# What would happen if I receive check with non-sufficient funds, canceled check, or bad checks ?

Our company undertakes for refund of checks with non-sufficient funds, canceled checks, or bad checks. However, such situation are very rare to happen.

# What does the amount of payments depend on?

It depends on your work solely. If you transfer money promptly and without any delays you will receive your next bank transfer or check immediately after you’ve sent the previous one. Everything depends on your own efforts; you may expect to receive up to 5-6 transfers or checks per week.

# How often and how will I be paid?

You will deduct your commission directly from each processed payment. This means that you will be paid the same day you transfer the payment.

# Are there any fees or payments to start this work?

No fees are included in orders to start and perform the work. All is required is your personal computer with Internet access. This is your best opportunity to start working as a telecommuter.

The above FAQ page is identical to the 'Medical Payments' fraudsters, (see the Quantel Medical Inc. scammer page), confirming these are the same scammers.

viii) You do not get a clearer description of the ILLEGAL money mule function of accepting stolen funds to your personal bank account and transferring a balance back to the criminals via Western Union than that - it will lose you a lot of money, get your bank account closed and your assets frozen and earn you a visit from the police. Do not be tempted or you will certainly regret it.

ix) No legitimate company would advertise for private citizens to operate as unlicensed and illegal money transfer agents. To do so clearly defines this fake company as both criminal and fraudulent. There is also a 'phishing' for identity theft aspect due to the nature of identity proof usually requested upon registration. Clear evidence of criminal fraud.

The above evidence clearly demonstrates beyond any doubt that the fake Finha Capital OY (Stolen Identity) website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Finha Capital OY Fraudsters - hosting details

Main Domains, Registrars and Hosts

Domain

finha-capital.com

Registrar

Bizcn.com, Inc. (R1248-LROR) - 02-apr-2010

Host Network

BEST-HOSTER-NET (Best-Hoster Group Co. Ltd) of Saint-Petersburg, Russia

Host IP

91.215.170.53

Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Domain Whois Data [These are criminal registered domains - the whois details are fake or stolen - personal details may be redacted where necessary]

Registrar:     BIZCN.COM, INC.
Status:        clientDeleteProhibited
Dates:         Created 02-apr-2010   Updated 02-apr-2010 Expires 02-apr-2011
DNS Servers:   NS1.FREEDNS.WS NS2.FREEDNS.WS

Domain name: finha-capital.com

Registrant Contact:
   Whois Privacy Protection Service
   Whois Agent yezyrrirfw@whoisservices.cn
   +86.05922577888 fax: +86.05922577111
   Xiamen Software Park shengshi Building
   xiamen fujian 361005
   cn

Administrative Contact:
   Whois Agent yezyrrirfw@whoisservices.cn
   +86.05922577888 fax: +86.05922577111
   Xiamen Software Park shengshi Building
   xiamen fujian 361005
   cn

Technical Contact:
   Whois Agent yezyrrirfw@whoisservices.cn
   +86.05922577888 fax: +86.05922577111
   Xiamen Software Park shengshi Building
   xiamen fujian 361005
   cn

Billing Contact:
   Whois Agent yezyrrirfw@whoisservices.cn
   +86.05922577888 fax: +86.05922577111
   Xiamen Software Park shengshi Building
   xiamen fujian 361005
   cn

DNS:
ns1.freedns.ws
ns2.freedns.ws

Created: 2010-04-02
Expires: 2011-04-02

DNS Lookup: finha-capital.com A record
Searching for finha-capital.com A record at c.root-servers.net [192.33.4.12]: Got referral to m.gtld-servers.net. (zone: com.)
Searching for finha-capital.com A record at m.gtld-servers.net. [192.55.83.30]: Got referral to ns1.freedns.ws. (zone: finha-capital.com.)
Searching for finha-capital.com A record at ns1.freedns.ws. [91.207.4.10]: Reports finha-capital.com.
Response:

Domain	Type	Class	TTL	Answer
finha-capital.com.	A	IN	86400	91.215.170.53

Looking up at the 2 finha-capital.com. parent servers:

Server	Response
ns1.freedns.ws [91.207.4.10]	91.215.170.53
ns2.freedns.ws [69.31.84.58]	Timeout

As listed, this criminal's website is hosted by BEST-HOSTER-NET (Best-Hoster Group Co. Ltd) of Saint-Petersburg, Russia on IP address 91.215.170.53

***Latest News*** Initial entry 17th. April 2010