Healthcare Payments Inc. Fraud

Don't Bear Internet Fraud

This fraudster should not be confused with any legitimate company of the same or similar name - the following amended stolen website graphics and the evidence of fraud clearly identify the fake Healthcare Payments Inc. website and these criminal fraudsters. The website template is stolen from a genuine company.

Healthcare Payments Inc. screenshot (11-Feb-2010)

Healthcare Payments Inc. This is just a standard serial scam website that has been set up to form a front for a money laundering job advertisement. The MO and the details clearly link this criminal to many other frauds, including Diamond-Exchange Inc., Silver Services Inc., Active Solutions Inc., Silver Finance Inc. and latterly Platinum Funds., Webeca Payments Inc., Neweca Payments Inc., Med Payments Inc., Paymate Solutions Inc., Den Payments Inc., scam plus a few others in there somewhere. The website domain healthcare-payments.net has only been registered recently for a one year period, their website is clearly stolen from the genuine Medical Payment Solutions company, the fake Healthcare Payments Inc. are not registered as a company in their supposed country of location, (Finland), their contact details are bogus and they have no web presence whatsoever due to a robots.txt file blocking all search engine access to their website. The purpose of the website is simply to lend an air of legitimacy to the inevitable spamvertised illegal money mule function of 'Transfer Manager' that will get your bank account closed, your assets frozen, lose you a lot of money and could cost you your liberty - don't be tempted. The criminal has alternate identical aliases of My Health Direct Inc., Medical Direct Inc., Medical Finance Inc., World Healthcare Payments Inc., Medical Payments Inc., Med Finance Flow Inc., Medical Payment Solutions Inc. (Stolen Identity) and CentroMed Finance Inc. - this is quite clearly a prolific serial Eastern European fraudster.

Healthcare Payments Inc. : Evidence of Criminal Fraud

i) The Healthcare Payments Inc. 'About Us' page states "With years of experience in healthcare practice management and billing, Healthcare Payments Inc.' goal is to increase cash flow, minimize bad debt, lower the cost of collections and enhance patient satisfaction through its' advanced web-based payment services, expanded payment options and proactive account management", but their website domain healthcare-payments.net was only registered with UK2 GROUP LTD./SELLOUT.NAME - 10-Sep-2009 for the usual 'criminal's domain' minimum period of only one year. A clear indication of a fraud domain.

ii) Stolen website - their website is a stolen copy of this Medical Payment Solutions website apart from the location details. That is clear and irrefutable evidence of site theft and fraud.

iii) This Washington Post article refers to these serial criminals - irrefutable evidence of fraud.

iv) They are supposedly a company registered and located in Finland, but they are not - a search of the Finnish BIS (Business Information System) shows that there is no such company as "Healthcare Payments Inc." registered in Finland - check for yourself - it is undeniably a fake company, (the suffic "Inc." wouldn't be used in Finland anyway - typical suffixes would be OY or OYJ). - irrefutable evidence of fraud.

v) A Google search shows absolutely no internet presence at all for this fake "Healthcare Payments Inc." which is not surprising as the criminals are using a robots.txt file to block all search engine access to their website - only a fraudulent website would do that.

vi) Another alias, another set of fake Website Contact Details:

Healthcare Payments Inc.
Kantie 14, Helsinki, Finland, 00434
Phone: +358 20 7117 371
E-mail: Angelina@healthcare-payments.net

• - The above address is just a minor variation on the address as used by the criminals for all of their aliases.
• - A Google search on the fake address of Kantie 14, Helsinki, Finland just returns their previous scam details which used the same fake address and the Washington Post article on these crooks. Neither Google nor Google Maps recognise it as a valid address.
• - A Wiki check on Finnish telephone numbers shows that the number "+358 20 7117 371" is incorrectly formatted for an international number and has the wrong number of digits, (the example shown should be of the form +358 2 xxx xxx). It also has the incorrect area code for Helsinki. It is clearly fake.
• - Unsurprisingly, A Google check for the incorrect telephone number "+358 20 7117 371" returns no results apart from previous scams and the Washington Post article on these crooks.

All clear evidence of fake details and fraud.

vii) The end of the money mule road:

Our customer have sent you a check with amount - $2,945.00 .
You will receive the check by USPS on 02/15/2010.

You can cash check at :
1) Cash in bank that issued the check.
2) Deposit the check into you bank account in any bank and wait until the check clears.

IN CASE YOU SEND MONEY SAME OR NEXT DAY FROM THE MOMENT YOU GET THE CHECK YOUR COMMISSION WILL BE HIGHER. YOUR COMMISSION WILL BE 15% (PERCENT) OF THE CHECK AMOUNT.

IF CHECK CASHING TIME EXCEEDS THIS TIME PERIOD YOU WILL GET STANDARD 8% (PERCENT) COMMISSION OF THE CHECK AMOUNT.

Your commission is 8% ($236).
Amount to send via Western Union is $2710
Please substruct all WU fees from the amount that you send ($2710)

You will need only the following information to send payment via Western Union:

-------------------
First name: Sergey
Last name: Pospehov
City: Saint-Petersburg
Country: Russia
-------------------

Please use Money In Minutes service if available. Please send transfer only from LOCAL Western Union OFFICE (DO NOT use WU-Online transfer option)

After you make the Transfer please email us the same day the following data:
PLEASE, SPECIFY THE FOLLOWING DATA COMPLETELY
1) Your address (as you filled in the Western Union receipt):...........
2) Your full name (as you filled in the Western Union receipt):..........
3) Amount of the transfer:...............
4) MTCN(Money Transfer Control Number): ..........

After you e-mailed this information please send scan of the receipt by e-mail or fax it.
Our fax number is: 1-(866) 818-4096

After we get money and are certain of your efficiency, the number of checks for cashing will be increased and you may be getting them on a daily basis. We appreciate the quality of our partnership and hope for mutual cooperation for a long time. Please you are kindly requested to email us back in regard of this message that you have read it and understood.

----------
Thank you,
Angelina Covey,
Financial Manager,
Healthcare Payments Inc.. Angelina@healthcare-payments.net

Eventually the deposit of $2,945.00 will come back as fraudulent and it will be recovered from your account, the bank will freeze the account and any assets in it and any associated accounts and may well inform the police. You will lose the amount of $2710 that you have sent.

The above evidence clearly demonstrates beyond any doubt that the Healthcare Payments Inc. website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Healthcare Payments Inc. Fraudsters - hosting details

Main Domains, Registrars and Hosts

Domain

healthcare-payments.net

Registrar

UK2 GROUP LTD./SELLOUT.NAME - 10-Sep-2009

Host Network

ilyopicha (ilyopicha - Ilia Iliev)/hosting.ua of "Sofia, Bulgaria"

Host IP

78.109.31.24

Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Domain Whois Data [These are criminal registered domains - the whois details are fake or stolen - personal details redacted]

Domain Name: HEALTHCARE-PAYMENTS.NET
Registrar:     UK2 GROUP LTD.
Status:        ok
Dates:         Created 10-sep-2009   Updated 09-nov-2009 Expires 10-sep-2010
DNS Servers:   NS1.EVERYDNS.NET NS2.EVERYDNS.NET NS3.EVERYDNS.NET NS4.EVERYDNS.NET

I was referred to whois.hostingservicesinc.net; I'm looking it up there.

Registration Service Provided By: SELLOUT.NAME
Contact: +007.9066516665
Website: http://sellout.name/

Registrant:
    N/A
    ****************
    ****************
    Riihimaki
    Etelä-Suomenlääni,11
    FI
    Tel. ****************

Creation Date: 10-Sep-2009
Expiration Date: 10-Sep-2010

Domain servers in listed order:
    ns4.everydns.net
    ns3.everydns.net
    ns2.everydns.net
    ns1.everydns.net

Administrative Contact:
    N/A
****************
****************
    Riihimaki
    Etelä-Suomenlääni,11
    FI
    Tel. ****************

Technical Contact:
    N/A
    ****************
    ****************
    Riihimaki
    Etelä-Suomenlääni,11
    FI
    Tel. ****************

Billing Contact:
    N/A
   ****************
   ****************
    Riihimaki
    Etelä-Suomenlääni,11
    FI
    Tel. ****************

Status:ACTIVE

DNS Lookup: healthcare-payments.net A record
Searching for healthcare-payments.net A record at k.root-servers.net [193.0.14.129]: Got referral to c.gtld-servers.net. (zone: net.)
Searching for healthcare-payments.net A record at c.gtld-servers.net. [192.26.92.30]: Got referral to ns4.everydns.net. (zone: healthcare-payments.net.)
Searching for healthcare-payments.net A record at ns4.everydns.net. [208.76.60.100]: Reports healthcare-payments.net.
Response:

Domain	Type	Class	TTL	Answer
healthcare-payments.net.	A	IN	3600	78.109.31.27
healthcare-payments.net.	NS	IN	86400	ns1.everydns.net.
healthcare-payments.net.	NS	IN	86400	ns2.everydns.net.
healthcare-payments.net.	NS	IN	86400	ns3.everydns.net.
healthcare-payments.net.	NS	IN	86400	ns4.everydns.net.
ns1.everydns.net.	A	IN	43200	208.76.62.100
ns2.everydns.net.	A	IN	43200	78.129.207.168
ns3.everydns.net.	A	IN	86400	208.76.63.100
ns4.everydns.net.	A	IN	86400	208.76.60.100

Looking up at the 4 healthcare-payments.net. parent servers:

Server	Response
ns4.everydns.net [208.76.60.100]	78.109.31.27
ns3.everydns.net [208.76.63.100]	78.109.31.27
ns1.everydns.net [208.76.62.100]	78.109.31.27
ns2.everydns.net [78.129.207.168]	78.109.31.27

As listed, this criminal's website is still hosted by the Bulgarian host ilyopicha (ilyopicha - Ilia Iliev)/hosting.ua of Sofia, Bulgaria on IP address 78.109.31.27 - last time I checked the hosting details for the crook's previous alias's (Med Finance Flow Inc.) hosting on the adjacent IP address 78.109.31.23 they were serverofsv (Dmitriy Serdyuk)/hosting.ua. of St Petersburg. Make of that what you will.

***Latest News*** Initial entry 11th. February 2010