An
Email with the Subject "Payment Advice - Advice Ref:[G61863413417] / ACH credits / Customer Ref:[150611A1190] / Second Party Ref:[REM-1504004226-AL1214]" was
received in one of Scamdex's honeypot email accounts on Wed, 13 Feb 2019 22:43:05 -0500
and has been classified as a Generic Scam Email.
The sender shows as HSBC <info@wawiracks.tk>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
0creditglobalpaymentcustomercustomlegalmailconfidentialhsbcreference will ach[g61863413417][150611a1190][rem-1504004226-al1214]dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => Array
(
[0] =>
[1] =>
)
[delivered-to:] => newblood@scamdex.com
[received:] => Array
(
[0] => from edie.newsblaze.comby edie.newsblaze.com with LMTP id uCnPMMnjZFzVUAAApOa+twfor ; Wed, 13 Feb 2019 22:43:05 -0500
[1] => from mxsv.wawiracks.tk ([68.183.121.134]:42785)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.91)(envelope-from )id 1gu7vV-0005a5-DZfor submittedemails@scamdex.com; Wed, 13 Feb 2019 22:43:05 -0500
[2] => from authenticated-user (mxsv.wawiracks.tk [68.183.121.134])(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))(No client certificate requested)by mxsv.wawiracks.tk (Postfix) with ESMTPSA id 02C53245C3for ; Thu, 14 Feb 2019 03:42:18 +0000 (UTC)
)
[envelope-to:] => submittedemails@scamdex.com
[delivery-date:] => Wed, 13 Feb 2019 22:43:05 -0500
[dkim-signature:] => v=1; a=rsa-sha256; c=simple/simple; d=wawiracks.tk; s=mail;t=1550115744; bh=T6kokEu1Uh956ZOGWMGqYSKlx93GCDQWTYQ/NnxqLWA=;h=From:To:Subject:Date:From;b=Nv6IbdTfXKe7ij/x7RUUr4iwpoRgwq1V3ZUU+g0TtwFzZQFFsgb9x/xdJN3K7LFTH cPq+6IS8m9e5tmu135g+8CPiBBFqOnoZ/jnZR9BKbf4HjRJTTvjCYvvkXO3E2H3fEm CqvXk/99pPI92m9RCxfPGdONZx5/+zhMWmnX6nv8mgzYYsB12NTmqCluMP/EMeD0b6 Zc7YcwrHpunozdm42zsaajyb7vDZY6kFrqEJD8SDtGl9JY/+E4kh9iv+2rk/WxDGkW yaWDL/bAvSn5XVW6Z2V5mtgX+E+SZcGGmvVRiZXPAMuKHRpGIr07B8VH2UqMIQu6ys b8CezlKSPONmg==
[from:] => HSBC
[to:] => submittedemails@scamdex.com
[subject:] => Payment Advice - Advice Ref:[G61863413417] / ACH credits / Customer Ref:[150611A1190] / Second Party Ref:[REM-1504004226-AL1214]
[date:] => 13 Feb 2019 19:42:06 -0800
[message-id:] => <20190213194206.AABD13A9EF239F6C@wawiracks.tk>
[mime-version:] => 1.0
[content-type:] => multipart/mixed;boundary="----=_NextPart_000_0012_60A17F8E.22ED2D80"
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
The attached payment advice is issued at the request of our customer.
The advice is for your reference only.
Yours faithfully,
Global Payments and Cash Management
HSBC *************************************************************************** This is an auto-generated email, please DO NOT REPLY. Any replies to this email will be disregarded. ***************************************************************************
This e-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. ******************************************************************* "SAVE PAPER - THINK BEFORE YOU PRINT!"
Dear Sir/Madam,
The attached payment advice is issued at the request of our customer.
The advice is for your reference only.
Yours faithfully,
Global Payments and Cash Management
HSBC *************************************************************************** This is an auto-generated email, please DO NOT REPLY. Any replies to this email will be disregarded. ***************************************************************************
This e-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. ******************************************************************* "SAVE PAPER - THINK BEFORE YOU PRINT!"