Ahmed Olabisi Ajayi, Nigerian scammer in Kuala Lumpur Malaysia

My email got hacked a few years ago and I also found out my PC + router also got hacked, so I am trying to find out the hacker/scammer who was responsible for this. I found out the scammer identity is Ahmed Olabisi Ajayi, a Nigerian scammer in Kuala Lumpur Malaysia.

The info below about Ahmed Olabisi Ajayi and his group are from Radio 419 MegaHertz video + description on youtube.

Ahmed Olabisi Ajayi is the leader of scam group from Nigeria. His group name is Ajayi 419 Cell. He studied in Kuala Lumpur Malaysia at Bostonweb College of Technology & Management. The members of his group are based in Nigeria, Ghana, Thailand, Malaysia. This group did romance scam in 2013. He was arrested in Kuala Lumpur airport in 2013, but unfortunately he was released after he bribed the Malaysian authority.

This is the video when he got arrested in 2013 which unfortunately already deleted now(this video was still available around 6 months ago, so it seems this group trying to delete all info about them) :

Screenshot of his face from the video :


Credit to Radio 419 MegaHertz on youtube.

Below are the members of his group in 2013 :

  1. Evelyn Oviomaigho
    National ID Card 0115101036 Nigeria
    National ID Card DT572202922 Nigeria
  2. Oghenekparobo Origbo
    National ID Card 0309430034 Nigeria
    National ID Card DT078973860 Nigeria
  3. Efe Adu
    Passport A00168592 Nigeria
    419 scam name: Loveth Efeni
    Email: [email protected]
  4. Ogheneruemu Onovugakpor
    National ID Card 0135722372 Nigeria
  5. Ahmed Olabisi Ajayi
    Passport A00216904 Nigeria Born in Lagos
    Passport issued in Abeokuta
    419 scam name: Herbert Sakey
  6. Ophelia Ayeh Passport H1352299 Ghana
  7. Gideon Mantey Drivers Licence MANT2802870201 Ghana
  8. Oliver Ayisi

Another emails from the video description above :
[email protected]
[email protected]
[email protected]

Bank account they used for money laundry in 2013 :
Ghana Aza account: Guaranty Trust Bank (Ghana) Ltd.
PMB CT 416 Cantonment Accra Ghana, Swift Code: GTBIGHAC, Account Name: Oliver Ayisi 205 1013945 230

This is the info I found about Bostonweb College :
bostonwebcollegepenipu.blogspot.com/2011/
So apparently the directors of Bostonweb College(Nizam Mokhtar and Yarad Ahmed) are scammer.

Bostonweb college was closed on November 30 2017, 4 years after Ajayi got caught. Info about Bostonweb College closed from this website :
Malaysian Qualification Register

List of scammer email and additional info of those email :
[email protected]
[email protected]
https://brendinghat.com/2021/08/30/cecilia-abrahamsson-hi-2/
[email protected]
[email protected]
[email protected]

https://419scam.org/emails/2020-06/20/01442615.40.htm
[email protected]
[email protected]
[email protected]
[email protected]
https://419scam.org/emails/2020-11/08/01665510.157.htm
https://419scam.org/emails/2020-11/12/01667695.56.htm
[email protected]
[email protected]
[email protected]
https://stopscamfraud.com/viewtopic.php?t=10295
[email protected]
[email protected]
[email protected]

[email protected]
https://419scam.org/emails/2019-09/17/01307402.59.htm
[email protected]
[email protected]
https://419scam.org/emails/2013-11/20/00527976.1.htm

[email protected]
[email protected]
[email protected]
https://419scam.org/emails/2021-08/22/01970147.44.htm

[email protected]
[email protected]
https://419scam.org/emails/2021-11/26/02063934.70.htm
https://419scam.org/emails/2022-02/01/02161965.22.htm
[email protected]

https://stopscamfraud.com/viewtopic.php?t=83
[email protected]
https://419scam.org/emails/2021-10/09/02019213.3950.htm
[email protected]

https://stopscamfraud.com/viewtopic.php?t=10766
[email protected]
[email protected]
https://nairaland.com/6387722/fake-scam-citibank-beneficiary-jonesdrefreim
[email protected]

https://stopscamfraud.com/viewtopic.php?t=13844
[email protected]
[email protected]

Another emails with connection to some of the emails above(same passwords, recovery email) :
[email protected](same password with [email protected])
[email protected](same password with [email protected])
[email protected](recovery email of [email protected] and same passwords with [email protected])
[email protected](same passwords with [email protected])
[email protected](same passwords with [email protected])

There are some identity which I found from [email protected] :
instagram.com/levina.la/?hl=en


There is a woman with name Levina La and a guy with name Alosto. Because the language is Swahili, so I think they are from East Africa. I don’t know yet if they are friend/family of Ahmed Olabisi Ajayi or not. Considering they deleted [email protected] so fast, I suspect there is something important in that email and maybe those people are the reason they deleted the email so fast.

List of scammer mac address which I found on my router :

These are list of IP they used to attack my email a few years ago after I regained access :
196.16.117.161
240e:390:1040:c04:246:5d2c:8e00:189b
5.180.221.30
209.234.253.115
175.144.74.160
191.101.244.194
160.116.245.184
107.178.113.119
37.57.90.167
125.212.159.248
186.221.186.107
85.117.56.74
173.195.15.33
46.183.177.83
196.16.205.168
168.80.193.255
191.92.240.36
202.5.36.215
218.68.0.42
160.116.237.121
160.116.236.129
240e:390:6292:6489:a4dd:d7a:9dca:4e90
196.17.123.216
196.16.204.180
196.19.137.100
123.253.67.211
196.19.183.160
160.116.83.61
197.210.70.198
187.190.165.158
189.45.192.4
176.197.5.218
23.236.249.242
163.198.189.50
160.116.83.35
196.19.182.50
107.173.196.102
160.116.83.233
168.81.112.139
107.174.182.242
31.215.40.30
197.211.192.146

Screenshot of attacker IP :



























There is 1 IP which I suspect is the real scammer IP : 175.144.74.160. This IP belong to Telekom Malaysia. In the whois info of that IP, there is someone with name Emran Ahmed Kamal. I did a research of that name and I found his name on some website :

medium.com/@bobbob_53152/the-hackers-wallet-46481bd9e57f

On medium website, I found another name : Siti Fuwaizah Mohd Ghazali. Her name also show up in this website :
webhostingtalk.com/showthread.php?t=96108

The scammer also used my email to create an EA account. This is the login history :








The login history were from many different country, but there was only 1 login history with PC, which was from Malaysia(MY).

They also spam my email after I regained access. This is the screenshot and header of one of those spam(I changed my email to Redacted) :


Email header in the pastebin :

There are 2 companies which I found from those spam : Digital Buldogs and Aldaniti.

Digital Buldogs ← missing 1 L. When I searched digital buldogs last year, there was only 1 digital bulldogs website on google :

Right now, when I search digital buldogs, the result is different, there are many digital bulldogs website and thedigitalbulldogs.com is not the top result on google anymore, I don’t know why this happened, maybe there is an error on google.

The address of thedigitalbulldogs from whois info is :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil, Kuala Lumpur, Wilayah Persekutuan, 57000, Malaysia

But I found a different address when I searched thedigitalbulldogs on google maps :
Block B, B-3-12, Level 3, Plaza Arkadia, 3, Persiaran Residen, Desa Parkcity, 52200 Kuala Lumper, Wilayah Persekutuan Kuala Lumpur, Malaysia

The address on google maps is weird, it is “Kuala Lumper” instead of Kuala Lumpur.

I found some post on scammer info with similar address like thedigitalbulldogs address(from the whois info) :

About Aldaniti, this is the info I found so far :

Aldaniti Network Limited was founded in 2006 and dissolved in 2009.
Info from this website :

In 2009, Aldaniti International Network Ltd was incorporated. The current director of this company are Rafael Coloma Hidalgo and James Francis Knipe.
There are some other company with those name as the director : Pulpower Ltd and Trigoss Ltd. Trigoss Ltd has one more director beside Rafael and James : Emma Plumley.
Info about Aldaniti International Network Ltd :

Info about Pulpower Ltd :

Info about Trigoss Ltd :

The previous address of Aldaniti, Pulpower, Trigoss was 113a Monnow Street Monmouth NP25 3EG(a gambling company), which is odd because based on google maps, the building on that address is quite small, so I don’t think 3 companies will fit into a small building like that.
The address of those 3 companies changed on March 29 2021 to Regus Falcon Drive Cardiff Bay Cardiff CF10 4RU(an office space rental agency) which is odd too because 3 companies moved to another address in the same day.
The address of those 3 companies changed again on April 24 2023 to Regus One Capital Quarter 1 Capital Quarter Tyndall Street Cardiff CF10 4BZ, it looks like another office space rental agency again.

There is 1 name which I found odd : Yomtov Eliezer Jacobs. He was a first director of Aldaniti International Network Ltd and Pulpower Ltd but his role was terminated not long after he appointed as the director. I did a research about him and I found out he was appointed as a director of 26811 companies so far and the pattern is similar like Aldaniti and Pulpower, he was appointed as director and his role terminated not long after that.
Info about him :

Some people also wondering who is he since 2011 :

This is a post on scammer info about some of the people above :

Info of Aldaniti is a scam/spam company :

Info of someone complained about spam he got from Aldaniti but the authority couldn’t do anything about it :

Because one of Aldaniti address is a gambling company address and Ajayi location is in Malaysia, so I did a research about gambling scam in Asia region. Maybe one of those scam has connection to Ajayi group.

This is some info about gambling scam that I found so far :

  1. 12 nigerian scammer working with 2 chinese in Malaysia scamming people through illegal online gambling :
    https://www.informationng.com/2019/10/12-nigerians-arrested-for-illegal-online-gambling-in-malaysia.html
  2. Nigerian scammer with name Ernest Okechukwu Okanya and Ivory Coast scammer with name Souleymane Konate stayed in Bali Indonesia and scamming people through online soccer betting :
    https://indobalinews.pikiran-rakyat.com/bali-nusra/pr-882695832/ngaku-anggota-militer-dan-judi-online-2-wna-nigeria-dan-pantai-gading-dideportasi-karena-overstay
  3. Nigerian scammer with name Awolola Oladayo Opeyemi and Awolola Gbolahan Ayobami based in Malaysia recruited Singaporean women for money mules and scamming people through romance scam :
    https://www.straitstimes.com/singapore/courts-crime/jail-for-2-nigerian-members-of-love-scam-who-recruited-sporean-women-as-money
    Video :
    youtube.com/watch?v=P52j3-W5uWw
  4. Indonesian scammer Apin BK scamming people through online gambling :
    https://www.detik.com/sumut/hukum-dan-kriminal/d-6733789/7-fakta-baru-kasus-bos-judi-online-apin-bk

I don’t know yet if some of those scammer are part of Ajayi group or not.
Number 1, I don’t know how those Nigerian scammer met with Chinese people in Malaysia and start working together, I assumed those Nigerian scammer has a leader.
Number 2, Those scammer stayed in Bali for a long time, so that means there was someone who paid their living cost which I suspect they have a leader.
Number 3, From the news those Nigerian scammer are member of scam group based in Malaysia, so maybe their leader is Ajayi.
Number 4, I don’t know if he is involved with Nigerian scammer like no 2 or his group is entirely different scam group.

I found a post of online soccer betting on spamlogger :

Because the Indonesian language is broken, I suspect the scammer is from outside Indonesia, so maybe either Nigerian scammer like number 2 or Indian scammer like in this post :
https://scammer.info/t/garmin-scammer-888-719-5444/51960/7 <-credit to drwat for the info.

My assumption so far, maybe Ajayi group has connection to whoever behind Aldaniti or maybe Aldaniti is actually a part of Ajayi group.

Additional info that I found so far :

There are Nigerian scammers living in Russia and Netherlands. They have an oil scam company with name Origbo UK Tank Farm :

The name Origbo is similar with someone from Ahmed Olabisi Ajayi group : Oghenekparobo Origbo. I don’t know if this is the same Origbo or different Origbo.

Indonesian woman got scammed by Nigerian scammers in Malaysia :

There are 2 scammer phone numbers on that site :
+60166493254(the victim said this scammer is a female pretending as a lawyer from Malaysia)
+60149217422(the victim said this scammer is a male)
I suspect those Nigerian scammers are part of Ahmed Olabisi Ajayi group.

Nigerian scammer in Malaysia :

Scammer emails from the link above :
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
Scammer phone numbers on that site :
+447012933865
+447762269262
+601151159576
Scammer bank account on that site :
Bank Name: CIMB BANK
Account Holder: ABISHAG A/P UMAKANTHAN
Account No: 7023220279
Swift Code: CIBBMYKL
Bank Address: No 69, Jalan Kuchai Maju 1, Dynasty 2, Off Jalan Kuchai Lama, 58200 Kuala Lumpur Malaysia.
Receiver’s address: No 15 Jalan Raja Laut 50350 Kuala Lumpur.
I suspect this one is part of Ahmed Olabisi Ajayi group too.

Fake Paypal email from Telekom Malaysia IP 210.187.122.110 in 2004 :

If Ahmed Olabisi Ajayi group was the one who did this, that means those Nigerian scammers already living in Malaysia and scamming people since a long time ago(almost 20 years ago).

This is an example of scam email from Oliver Ayisi, a member of Ahmed Olabisi Ajayi group :

I found the name Emran Ahmed Kamal on this website :

Based from the info on that website, he has a scam website :
eci.promolike.com
And he did identity theft in 2017 using that website.

Romance scam from Telekom Malaysia IP :
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1260141464/0
Scammer email and sender IP from the link above : [email protected], 115.134.184.11
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1250334496
Scammer email and sender IP from the link above : [email protected], 115.133.23.140
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1251216907/1
Scammer email and sender IP from the link above : [email protected], 124.13.66.249
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1234141694
Scammer email and sender IP from the link above : [email protected], 60.50.185.252
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1251723599/3
Scammer email and sender IP from the link above : [email protected], 115.133.213.222
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1245233966/0
Scammer email and sender IP from the link above : [email protected], 115.134.223.70
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1251211001/4
Scammer email and sender IP from the link above : [email protected], 115.133.108.117
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1249131483
Scammer email and sender IP from the link above : [email protected], 115.133.211.44
https://www.anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1254865474
Scammer email and sender IP from the link above : [email protected], 118.101.173.163, 115.134.227.10, 118.101.118.237, 203.82.80.84

The IP 203.82.80.84 is belong to Celcom Axiata Berhad(in 2010, the name of this company was Celcom Internet Service Provider).

All those links on anti scam website are romance scam from Telekom Malaysia IP + Celcom Axiata Berhad IP, so I suspect the one who did those romance scam is Ahmed Olabisi Ajayi group.

More info about Yomtov Eliezer Jacobs :

That is a football website, but in the comment section there is someone who post info about Yomtov. Basically, he said Yomtov is involved with International Organized Crime in UK.

I found some websites with same address/same building as The Digital Bulldogs(Technology Park Malaysia) :

Job employment scam in 2013 :

Scam website from the link above :
http://www.inteqno.com/?p=careers
Address of this website in 2013 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Home machine shop scam in 2021 :

Scam website from the link above :
https://www.wgmol.com/collections/husky-tool-chest-combos?page=1
Scammer email from the link above : [email protected]
Address of this website in 2021 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Ukraine charity scam in 2022 :

Scam website from the link above :
www.novaukraine.net
Scammer email from the link above : [email protected], [email protected]
Scammer crypto wallet from the link above :
ETH Wallet: 0x730cFAD13C41C2B10af02759E2Ea0093F881E7E3
BTC Wallet: 3Fn4dY98U3KTxjMgjjVvy13UF9YfGMAGii
USDT-TRC20 Wallet: TV9QmhxQu57Q8g7t1YhYHNV33spDTaVWJ1
TRX Wallet: TV9QmhxQu57Q8g7t1YhYHNV33spDTaVWJ1
Address of this website in 2022 :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

MTN scam in 2009 :

Scam website from the link above :
http://www.2009anniversary.com/
There are 2 address of this website in 2009 :
First :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
Second :
Unit 21-3A, Level 21
Plaza DNP 59, Jalan Abdullah Tahir
Taman Century Garden
80300 Johor Bahru, Johor
Malaysia

Scam email impersonating microsoft in 2018 :
https://forums.whirlpool.net.au/archive/2747564
Scam website from the link above :
microsoftreward.com
Address of this website in 2018 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
Address of this website right now(2023) :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Job employment scam in 2013 :

Scam website from the link above :
http://synovateconsulting.com
Address of this website in 2013 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Logistic job scam in 2016 :

Scam website from the link above :
nlmails.com
nlvirtualspace.com
Address of both website in 2016 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Insurance scam in 2018 :

Scam website from the link above :
tyjc-insurance.net
Address of this website in 2018 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Job employment scam in 2016 :

Scam website from the link above :
nocturne-job.com
Address of this website in 2016 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Job employment scam in 2013 :

Scam website from the link above :
comperra.com/?p=careers
Address of this website in 2013 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Job employment scam in 2013 :

Scam website from the link above :
crealiq.com/?p=careers
Address of this website in 2013 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Aftermarket car parts/accessories scam in 2020 :

Scam website from the link above :
dadiplan.com
Address of this website in 2020 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

Parcel delivery scam in 2018:

Scammer wechat id from the link above :
wangledon
Scammer phone numbers from the link above :
+447708290669
+6060102717012
+60389966788
Scammer websites from the link above :
sunexpresscourier.cf
billmillmanassociates.com
nationalwestonline.com
accentureoverseas.com
ronmilfordllp.com

bsnoffmerchant.com
Address of those websites in 2018 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
Scammer email address from the link above :
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]

Heavy equipment sale scam in 2022 :
https://fraudfighters.online/viewtopic.php?t=24752
Scam website from the link above :
pthexindotrading.com
Address of this website in 2022 :
Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000

It looks like Technology Park Malaysia is the source of various scam/spam, so I suspect this building is scammer headquarters.

I found a post on scammer info with similar address as Aldaniti :

The address on that post(Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles) is similar with address(Aldaniti address) from this website :

The company name on antispam website is Global Traffic Ocean Media Limited, it is different company name than the post on scammer info. But the address is the same, so I think the real company in this post((050) 3185-4572) is Aldaniti International Network Ltd.

There are more websites with address Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles :

Scam websites on that link : rfmfx.com and mmdfx.com
Company name on that link : Rockfort Group Inc
Address of mmdfx.com was Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles.
This is forex scam in 2020 and the company which managed deposit and withdraw on mmdfx site were Mahamudra Company Limited and Mahamudra Group Limited.
The info about Rockfort Group Inc is in here :
ROCKFORT INC LTD overview - Find and update company information - GOV.UK
Something odd I found about this company :
The business of this company from the link above was about food, but from the lowyat site above this company known as a forex scam company.
The director details of this company was removed from the public register on March 29 2017, so I suspect the director details of this company was fake.

https://mgmxtrade.com
That is a forex website and based from the info in here :

The location of that site is in china and they don’t have valid regulation.
The address of that site is Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles, phone number is +60386879841 which is a Malaysian number and the group behind this website is Mors Group Ltd.
Screenshot from mgmxtrade website :

Mors Group Ltd address is :
Plaza Taragon, A-10-06,
No.3, Jalan SS6/6,
Kelana Jaya, Petaling Jaya
47301 Selangor, Malaysia
And the website is :

There is a company with name Mors Group Ltd too in UK :

Review of mgmxtrade.com :
https://www.scamadviser.com/check-website/mgmxtrade.com
Another info about Mors Group Ltd :
Mors Group Ltd - Company Profile - Endole
So basically Mors Group Ltd has 2 address, one in Malaysia and another one in UK(Greenmeadows, Midhurst Road, Haslemere, United Kingdom, GU27 3LL).
From the website itself(morsgroup.com), they said it was founded in 2012 but the website itself was created in 2014 based from the whois info.
Mors Group in UK was founded in 2019 and the people who managed it are different than people who managed Mors Group in Malaysia.
Based from info from suite endole website, Mors Group Ltd official website is morsgroup.com which is located in Malaysia, but the registered address is in UK, this is quite confusing.

https://medium.com/@micallst/an-osint-analysis-of-the-elon-musk-bitcoin-scam-778fb1b14b3b
Scam websites on that link : m-tesla.me, elonmusk.id, m-tesla.pw
Company name on that link : Safe Value Management, website : safevalue.pro
Address of Safe Value Management was Global Gateway 8, Rue de la Perle, Providence, Mahe, Seychelles.

I also found some companies with address Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles :

All companies in that link already dissolved now but there is something odd with the director of those companies(Lianna Stanisias Tall).
She was appointed as the director of those companies and her role was terminated not long after that, this pattern is like Yomtov Eliezer Jacobs.
Her name is also show up in here :

https://forex-scam.org/2021/05/21/finansovaya-piramida-nersol-ostorozhno-moshenniki/
Scam website on that link : nersol.com
Address of nersol.com was Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles.

https://forex-scam.org/2021/09/10/scam-broker-evotrade-mahrovyj-lohotron/
Scam websites on that link : evotrade.com, evotrade-ru.com, evotrade2.com, beevotrader.com
Address of evotrade.com was Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles.
Company name on that link : Techware Limited with address Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles.
Info about Techware Limited :
TECHWARE LTD overview - Find and update company information - GOV.UK
The scammer behind evotrade.com is Wahyu Kenzo, an Indonesian scammer :
Arrest of Indonesia’s ‘Crazy Rich Surabayan’ spotlights risk of robot-trading investment scams | South China Morning Post
There is no info about Aldaniti in that article, so I suspect there is someone/an organization behind Wahyu Kenzo.

My suspect so far, the owner of Aldaniti International Network Ltd is Mors Group Ltd, a company in Malaysia/UK.

More info about websites/companies with address Global Gateway 8, Rue De La Perle, Providence Mahe, Seychelles :

Unauthorised firm in UK : Compare Bonds Online.
Scam website on the link above :
https://compare-bonds.online
Address : Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles.
Phone number : 2001542258

Scam website on the link above :
tradepulsefx.com
Address : Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles.
There is an Indian scammer name on that link : Ankit Kumar Goyal.

https://www.federalregister.gov/documents/2022/03/23/2022-06087/notice-of-ofac-sanctions-actions
There is a company with address Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles on that link : AGR International Limited.
The owner of that company is Alain Francois Viviane Goetz.

Unauthorised firm in UK : Bank Invest Capital/G.M.E. Ltd.
Scam website on the link above :
www.bankinvestcapital.com
There were some address of this company and one of the address was Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles :

  1. 7th fl 69 Old Broad Street, London, SE1.
  2. Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles.
  3. Dashwood House Level 17, London Bridge London.
    Phone number : 2035143800

Scam websites on that link :

http://www.theblue.community
Address of theblue.community was Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles based from the link above.

Another website with address Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles :
https://support.google.com/webmasters/thread/116011774/website-getting-better-but-keeps-losing-positions-and-traffic?hl=en

Scam website from the links above :

Based from the google link above, this was the old address of the website :
CHN Group Limited., a company incorporated in Seychelles.
Registered address in Seychelles: Global Gateway 8, Rue de la Perle, Providence, Mahe.
Postal Address: Amsterdam, Kraanspoor 50, 1033 SE, Netherlands.

On bitcointalk website, people said this website is a scam website.

The current address of this website is :
CHN Group LLC., a company incorporated in Saint Vincent and the Grenadines.
Registered address in Saint Vincent and the Grenadines: Euro House, Richmond Hill Road, Kingstown.
Postal Address: Newtonlaan 115, Utrecht, 3584 BH, Netherlands.

Screenshot from changenow website :

So they changed some details :
Company name changed from CHN Group Limited to CHN Group LLC.
Address changed from Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles to Euro House, Richmond Hill Road, Kingstown Saint Vincent and the Grenadines.
Postal Address changed from Amsterdam, Kraanspoor 50, 1033 SE, Netherlands to Newtonlaan 115, Utrecht, 3584 BH, Netherlands.

I suspect they changed the details to avoid detection, especially because the old address was similar with Aldaniti International Network Ltd address(Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles).

Apparently there are some suspicious/scam websites with address Euro House, Richmond Hill Road, Kingstown Saint Vincent and the Grenadines too :

https://africacheck.org/fact-checks/meta-programme-fact-checks/scam-alert-beware-facebook-posts-promoting-binomo-investment

Scam website from the links above :

Address of binomo : Euro House, Richmond Hill Road, Kingstown Saint Vincent and the Grenadines.
There is a post about binomo on scammer info :

Suspicious website from the link above :
https://famemarkets.com/
There were 2 addresses of this website :
Euro House, Richmond Hill Road Kingstown, P.O Box 2897, VC0100, Saint Vincent and the Grenadines.
No 64, Jalan Badminton 13/19, Persiaran Sukan, Seksyen 13, 40000, Shah Alam, Selangor, Malaysia.
The Malaysian address is odd because when I checked it on google map that address is a road, so I suspect that is a fake address.

Scam website from the links above :
https://ecmtrader.com/
There are 2 addresses of ecmtrader :
Euro House, Richmond Hill Road, P.O. Box 2897, Kingstown, VC0100, Saint Vincent & the Grenadines.
E-SG-12, Sunway Geo Avenue, Jalan Lagoon Selatan Bandar Sunway 47500 Petaling Jaya, Selangor, Malaysia.
The Malaysian address is a mall based from google map, so I suspect that is a fake address too.

There are some post on scammer info about Saint Vincent and The Grenadines, but I don’t know if the scammer inside the post below are part of Ajayi group or different scammer :

https://scammer.info/t/list-of-scamming-domains/280000
Scam websites in Saint Vincent and The Grenadines from the link above :
http://mp3bee.com/
http://kijijii.com/
http://khmernew.com/
I found some info from the whois info of 3 domains above :
Email : [email protected]
City : Kamlooops, Canada.
Organization : BigRock Solutions Ltd.
Info about BigRock Solutions Ltd :
BIG ROCK SOLUTIONS LIMITED overview - Find and update company information - GOV.UK
This organization was incorporated on September 5 2012 and dissolved on March 4 2014.

Scam website in Saint Vincent and The Grenadines from the link above :
http://intrgroup.com/

Scam website in Saint Vincent and The Grenadines from the link above :
https://mycoin-banking.com/

More info about website/company with address Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles :
https://www.cnb.cz/en/supervision-financial-market/consumer-protection-and-financial-literacy/consumer-protection/notices-about-activities/Notice-about-the-activities-of-Mars-Invest-Ltd.
Scam website from the link above :
http://mars-invest.com
Scam company name :
Mars Invest Ltd
Address of mars-invest.com in 2017 was :
Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles

There is another info about Mars Invest Ltd in here :
https://forex-scam.org/2021/05/19/lohobroker-marsinvest-moshenniki/
Scam websites from the link above :
mars-invest.com
mars-investltd.com
marshtrade.com
Phone number of mars-invest.com :
+40725086668
Address of mars-invest.com :
Beachmont Business Centre, Suite 205, Kingstown, St. Vincent

They changed the address of mars-invest.com from Global Gateway 8, Rue De La Perle, Providence, Mahe, Seychelles to Beachmont Business Centre, Suite 205, Kingstown, St. Vincent.

I think they did it to avoid detection like changenow website, but they got exposed again in 2021 by forex scam website.

Since yesterday, they are attacking my email again, this is list of IP they used to attack my email :
2a07:db81:bdce:9a0a:731a:843e:7e50:be58
75.97.235.45
192.42.116.210
201.140.216.93
172.56.216.120
86.149.38.84
46.64.205.111
2a07:db81:e2b3:3f25:b8f:7eca:8a21:2937

Screenshots of scammer IP :








More info about websites/companies with address Beachmont Business Centre, Kingstown, Saint Vincent and The Grenadines :

I did some research about address Beachmont Business Centre Kingstown Saint Vincent and The Grenadines, and based from google map the company who own it is Griffith Corporate Centre.
Griffith Corporate Centre is an office rental company.
Screenshot from google map :

That is an example of a company with address Beachmont Business Centre in Saint Vincent and The Grenadines(Inzo LLC).

So a scam company like Mars Invest is under same office rental company with another scam company(Inzo LLC), only different suite.
That means the scammer behind a scam company like Inzo LLC and Mars Invest is possibly a part of Ahmed Olabisi Ajayi group.

The owner of Griffith Corporate Centre said in the google map comment section that he is only rent office to people, not the owner of those scam companies.
This is the screenshot of the owner said to people in the comment section of google map :
ss 2

He told people to contact a Registered Agent called Wilfred Services Ltd, but the address of Wilfred Services Ltd is in Suite 305, Griffith Corporate Centre.
That means the owner rented an office to Wilfred Services Ltd.
Wilfred Services Ltd website :
wilfredinternationalservices.com
I don’t know if it’s possible for Wilfred Services to rent an office to other people without the owner consent or not.

There is another Wilfred Services Ltd company in England :

Wilfred Services Ltd(England version) was incorporated on May 3 2023.
Registered address :
83 Barrack Road, Hounslow, TW4 6AN

There is a post on scammer info about one of the company above(Inzo LLC) :

I suspect the scammer on the link above is part of Ahmed Olabisi Ajayi group.

Scam website from the link above :

Address :
Beachmont Business Centre, Suite 117 Kingstown, St. Vincent and the Grenadines.
Phone number :
+18007214152
I don’t know who rented Suite 117 to scammer, either Wilfred Services Ltd or the owner of Griffith Corporate Centre.

Scam website from the link above :

Scam company from the link above :
LQD FX
Address : Beachmont Business Centre, 359, Kingstown, Saint Vincent and The Grenadines.
Telephone : +442080641038
Mobile : +35724030504

Scam website from the link above :
bitbinx.com
Scam company from the link above :
BITBINX
Address: Suite 356, Beachmont Business Centre, Kingstown, Saint Vincent and The Grenadines.
Phone number : +447868808958

https://www.scamwarners.com/forum/viewtopic.php?f=10&t=203110
Scam website from the link above :
https://365capitalmarkets.com
Address : Beachmont Business Centre, Suite 85, Kingstown, Saint Vincent and the Grenadines.
Phone number : +441518081070

Scam websites from the link above :

fx-advisor.net

Address of fx-advisor.net was Beachmont Business Centre, Suite 63 Kingstown, St.Vincent and the Grenadines.
Phone number : +442039662580
The owner of fx advisor website is Rozenti Consulting and Media LTD.

Another IP which they used to attack my email :
2a07:db81:8c4d:50bd:9849:5a0b:53de:f9cd
74.129.146.69
82.17.46.184
172.88.102.197
47.40.224.50
2a13:3f87:f6ee:e875:e1b7:3c58:624d:31de
49.146.38.170
2a13:3f85:d280:e79a:c0d2:f4b1:c3f6:ccc3
123.163.167.122
2a0f:9407:8c6:a7eb:aa92:1519:9556:36ea

Screenshot of scammer IP :










1 Like

Another info about Griffith Corporate Centre :

https://forex-scam.org/2021/10/19/esplanade-market-solutions-ofshornaya-pomojka/
https://medium.com/@scamshunter/alliance-capital-c6cf232084d3

Info from forex scam website above :
Scam company name :
Esplanade Market Solutions
Scam website :

Info from medium website above :
Scam company name :
Alliance Capital
Scam website :
alliance-capital.io
Phone number :
+4402075340788

It seems this address(Suite 305, Griffith Corporate Centre, Beachmont P.O.Box 1510, Kingstown - Saint Vincent and the Grenadines) is a famous scammer address.

On abc website, there is a victim from Australia who got scammed by a scam company called HybridReserve.

HybridReserve website : hybridreserve.com

The address of HybridReserve was Suite 305, Griffith Corporate Centre, Beachmont, Kingstown.

The owner of HybridReserve is a company with name Singlebell OU which located in Estonia.

Singlebell OU address is(was?) Roosikrantsi 2-K367, Tallin, Estonia.

This is some history of Singlebell OU location, people inside it from abc website above :
Singlebell OU was registered on March 2018 with address Roosikrantsi 2-K367, Tallin, Estonia then it changed location the next month to Nearchou Kliridis 6-101, Nicosia 1087.
There was only 1 board member inside Singlebell OU, Serge Michou Tchio Daloko.
In July 2020, the location changed again to Calle Sicomoros 122, La Perla.
The board member was also changed to Daniel Lopez Romero.

About board member changed, this pattern is like Yomtov and Lianna, appointed as a director then their role was terminated not long after that. So I suspect there is a connection between all of them.
My personal guess, there are 2 possibilities in here :
First : maybe Yomtov, Lianna, Serge, Daniel are different person and they are working together to scam people.
Second : maybe one scammer used different fake names like Yomtov, Lianna, Serge, Daniel, because the pattern is odd(appointed as a director/board member, then their role was terminated not long after that).

There is one more thing I suspect, maybe Serge Michou Tchio Daloko is Sergey on this site :
https://support.google.com/webmasters/thread/116011774/website-getting-better-but-keeps-losing-positions-and-traffic?hl=en

Additional info about HybridReserve :

There is another scam company too on this address : Roosikrantsi 2-K367, Tallin, Estonia.

Scam company name on the links above :
Brighter Trade(also known as Ingoten OU/Igoten OU, I don’t know which one is the correct name).
Scam website :
brightertrade.com
Phone number :
01446382070
02036955672
Address :
Harju maakond Tallinn Kesklinna linnaosa Roosikrantsi tn 2-K367, 10119 Estonia.

Not only on Roosikrantsi, there is another scam company too on this address : Nearchou Kliridis 6-101, Nicosia 1087.

Scam website :
duecreds.com
The owner of that website is Dalecliff Limited with address Nearchou Kliridi, 16 Flat Office 101 Nicosia Cyprus 1087. The address is a bit different(16 Flat Office 101, but still in Nearchou Kliridi Nicosia Cyprus 1087), so I guess this is like Griffith Corporate Centre, same area/location but different suite.
Phone number of Dalecliff Limited : 833-405-8013
Director of Dalecliff Limited : Loukia Charalampous.

Another IP which they used to attack my email :
2a13:3f85:7950:297d:72d3:5aea:1f75:5e9d
112.213.173.239
190.213.94.29
2a07:db81:5b78:6eae:8bd:33e9:9135:b8cf
2a13:3f84:f45e:e2f5:7387:4d13:555f:91bf
2a07:db81:3f71:af98:2c0f:ada1:c79:7c95
2a07:db81:be49:62c6:7fe1:5f4a:c13e:216e
2a07:db81:ed6c:b479:8016:2f51:873f:119
2a07:db81:d0f9:e926:80f1:bb30:2a85:d59
76.89.18.33
2a13:3f86:4bc4:1648:100e:1b38:2ad6:a882
65.60.228.85
24.191.75.31
2a07:db81:fd98:3818:189c:e1d2:3ebc:ce65
2a07:db81:ce8a:a367:ab24:6e78:5437:5352
2a07:db81:2363:eda3:d460:5408:a41f:161
137.25.43.251
68.129.26.78
2a07:db81:acd5:48:d18f:39e8:ccda:3ae8
97.76.233.138
71.203.113.58
2a07:db81:cef1:6602:cf5b:f6ca:ae63:d2e3
2a07:db81:a6f:f8fa:d8a2:ec87:4952:4abd
2a07:db81:136a:8523:f701:9f72:3898:87d7
2a07:db81:e608:d087:641f:85d6:4d40:5d4f
2a07:db81:7514:6690:65c2:e472:6fec:3592
2a07:db81:9ec7:4159:747:326a:6bc8:4cb5
2a07:db81:6e10:9c8a:74b3:f2aa:a83:7d39
2a07:db81:5cad:96ea:204d:eb80:9557:4e7d
2a07:db81:ee15:acf6:7722:d974:9e42:7b41
2a07:db81:fecb:ca9a:9bd7:beb4:2bdf:9be1
88.230.9.111
90.211.112.24
113.121.21.118
2a13:3f80:5a2:4d4b:d00d:7660:1fef:8c95
2a07:db81:5737:6253:a5c2:fdf2:8059:b0ae

Screenshots of scammer IP :




































Another info about scam companies/websites with address Suite 305, Griffith Corporate Centre, P.O. Box 1510, Beachmont, Kingstown, Saint Vincent and the Grenadines :

Scam websites :
ghctrades.com
in-tan.com
Address of both sites : Suite 305, Griffith Corporate Centre, P.O. Box 1510, Beachmont, Kingstown, St. Vincent and the Grenadines.
Companies associated with both sites : GHC Global Holdings Capital Limited and Charterprime Limited, both companies incorporated in New Zealand.

Scam company name :
Namelina Limited
Scam website :
trademote.com
Address :
Suite 305, Griffith Corporate Centre, P.O. Box 1510, Beachmont, Kingstown, St Vincent and the Grenadines.
Phone number :
(02)91381762
(02)83181600

Scam company name :
TBanque
Address :
Ton Investments Group LLC, C/o Suite 305, Griffith Corporate Centre, Beachmont, Kingstown, St. Vincent and the Grenadines.
Scam website :
tbanque.com

Scam company name :
Current Coins
Address :
TBcorp Ltd - Suite 305, Griffith Corporate Centre, PO Box 1510, Beachmont, Kingstown, St. Vincent and the Grenadines.
Phone number :
041225087328
Scam website :
currentcoins.net

Scam company name :
Henyep Markets
Address:
Suite 305, Griffith Corporate Centre, Beachmont, Kingstown, St. Vincent and the Grenadines, P.O. Box 1510.
Scam website :

Scam company names :
BeforexCapital
ProQuote27 also known as 27ProQuote
Empire Capital LLC(owner of ProQuote27)
Scam websites :

27proquote.com
Address of ProQuote27 :
Suite 305, Griffith Corporate Centre, Beachmont, P.O. Box 1510, Kingstown, Saint Vincent and the Grenadines.
Payment processors of ProQuote27 :
ApcoPay by ApcoSystems Ltd, registered in Malta with George Kakouras as the managing director.
Edu4Traders(edu4traders.com) by Hunge Media Ltd, registered in UK with Jurijs Beinarovics(someone from Latvia) as the director.

Additional info about BeforexCapital :

Scam company names :
BeforexCapital
The Capital Holding LLC
IRBEM(International Regulator & Brokerage E-markets)
FX Publications, Inc(owner of BeforexCapital)
Capital Holding Funds PLC
Scam websites :

capitalholdingfunds.com
irbem.com
The owner of irbem website is Ronniele Ferreira Campos, someone from Brazil.
Payment processors of BeforexCapital and Capital Holding Funds : GlobalNetint.
GlobalNetint had a customer(a company) with name Futurus X OU(an Estonia company) which operated a crypto exchange Misterbit/Mrbit(misterbit.net).
Owner of Futurus X OU :
Ivan Abramov
Christiano Chiarugi

Scam company names :
FX-Capitalize
Lacari Group Ltd
FXQuote247
proFXCredit
Scam websites :
fxcapitalize.com
fxquote247.com
profxcredit.com
Lacari Group scammers are associated with ProQuote27 and BeforexCapital, they were operated by Empire Capital LLC and The Capital Holding LLC.
Address of Lacari Group Ltd, Empire Capital LLC, The Capital Holding LLC :
Suite 305, Griffith Corporate Centre, Beachmont, P.O. Box 1510, Kingstown, Saint Vincent and the Grenadines.

This is Nigerian scam in Estonia, I don’t know if this scammer is a part of Ajayi group or not.
I will put the link here because there is a possibility this group is part of Ajayi group(one of scammer IP was Thailand IP and Thailand is close to Malaysia):

More info about BeforexCapital/BeForex Capital and other companies :

Address :
4 Carlton Gardens, London, UNITED KINGDOM, SW1Y 5AA.
First Floor, First St Vincent Bank Ltd, Building James Street, ST. Vincent and the Grenadines, Kingstown.
Phone number :
+447786134166
+4401213503790

Scam company name :
Edmond de Rothschild Private Merchant Banking/Edmond de Rothschild Asset Management(Clone of FCA authorised firms).
Phone number :
02081460814
02039642944
02034328818
02081461157
02039002166
Scam websites :
edmondderothschildpmb.com
edmondderothschildam.com
The address of legit firm is 4 Carlton Gardens, London, UNITED KINGDOM, SW1Y 5AA.
That is the same address as BeForex Capital, so I think BeForex Capital impersonated the legit company to look real.

This is some info about GlobalNetint, payment processor of BeForex Capital :

https://fintelegram.com/whistleblower-request-transactworld-group-meets-globalnetint/

In May 2019 FinTelegram uncovered that the Indian payment processor Paymentz facilitated the huge Zoo Broker Scam Network. Paymentz is a part of the Transactworld Group of the Indian brothers Anupam Vassa and Amoolya Vassa. This group operates with several legal entities across different jurisdictions. The UK entity Transactworld Limited is an FCA-authorized E-Money Institution, and the Cyprus-based Transactworld Limited is an agent of GlobalNetint UAB d/b/a payswix, an EMI regulated by the Bank of Lithuania.

Scam websites :

https://paymentz.com

Scam companies :
Transactworld Limited, United Kingdom.
Transactworld Limited, Cyprus.
Payment Gateway Solutions Pvt. Ltd, India.

People related to the scam :
Anupam Vassa (https://www.linkedin.com/in/anupam-vassa-8091465/).
Amoolya Vassa (https://www.linkedin.com/in/amoolya-vassa-24061719/).
Mubashir Patel (https://www.linkedin.com/in/paymentz/).
Raj Agarwal (https://www.linkedin.com/in/raj-agarwal-696010157/).
Minesh Vaishali Mehta.
Hima Shah.

Regulator :
FCA, Bank of Lithuania.

Scam connected to :
GlobalNetint UAB d/b/a payswix.

Transactworld Limited operates the Transactworld(www.transactworld.co.uk) and worked with several agents:

Kubopay Ltd via www.kubopay.com(controlled by Neil James Mcclure and Kenneth Lionel Durante).
Taire Limited(controlled by Neil James Mcclure and Kenneth Lionel Durante).
World of Money Limited via www.worldofvoucher.com(controlled by Kamal Kumar Prabhakar).

While the FCA-regulated Transactworld Limited used to be a client of the Lithuanian-regulated GlobalNetint UAB, the unregulated Cypriot Transactworld Limited operates the website www.transactworld.com as an authorized agent(intermediary) for the regulated Lithuanian GlobalNetint UAB d/b/a payswix since June 2019.

The unregulated Indian Paymentz Gateway Solutions Pvt. Ltd. operates its website with the triangle logo under the domain www.paymentz.com.

https://fintelegram.com/attention-regulated-high-risk-payment-processor-globalnetint-is-now-payswix/

In June 2021, the Lithuanian-Israeli e-Money Institution GlobalNetInt(GNI), related to the FCA-regulated MoneyNetint Group, was penalized by the Bank of Lithuania for its violations of anti-money laundering and terrorist activities financing rules. GNI has to pay €350,000 because it did not properly assess the risk posed by customers and did not always ensure that customer identification remotely complied with legal requirements. GNI has been a notorious scam facilitator and is now doing business as payswix.

Scam company name :
payswix

Scam website :

Social media of scam company :
https://www.linkedin.com/company/globalnetint-jsc/

https://twitter.com/GlobalNetInt

Legal entity :
GlobalNetint UAB(GNI).

Beneficial owners :
Gil Trif, Israel.
Nissan Trif, Israel.
Yishay Moshe Trif, Israel.
Raphael Yehudah Golan, UK.
Liudvikas Kulikauskas, Lithuania.

Director :
Liudvikas Kulikauskas, CEO.

Regulator :
Bank of Lithuania
Authorization code LB000434

Related with :
MoneyNetInt Ltd, regulated by the UK FCA.

In 2020 and 2021, GNI had massive problems with money laundering and the systematic facilitation of broker scams and illegal gambling. Insiders have provided FinTelegram with information confirming these compliance issues. The compliance team at the time had left GNI, the Lithuanian law enforcement agencies investigated the situation. In June 2021, the Bank of Lithuania imposed a fine on GNI and a temporary restriction on its activities.

The company’s Lithuanian CEO, Liudvikas Kulikauskas, is also a GNI shareholder. He and his wife Egle Kulikauskiene used to run the payment processor Ifind MB d/b/a Findiban(www.findiban.com), which was positioned as a high-risk payment processor, offering businesses a range of financial services, including SEPA IBAN account, white-label FinTech services, or credit card processing. Upon FinTelegram reports, Findiban vanished.

https://fintelegram.com/lithuanian-compliance-issue-or-why-globalnetint-is-grateful-for-its-penalization/

On June 25 2021, Bank of Lithuania had fined GNI €350,000 for systematic violations of money laundering guidelines and local financial laws, as well as other offenses, following an audit of the e-Money Institution(additional info : https://fintelegram.com/bank-of-lithuania-fines-globalnetint-for-violating-money-laundering-rules-and-restricts-business/).

CEO/General Manager of GNI is Liudvikas Kulikauskas.

GNI is a part of the FCA-regulated MoneyNetint Group.

The MoneyNetint Group is controlled by the four Israeli payment veterans : Raphael Golan, Gil Trif, Nissan Trif, and Yishai Trif.
There is another payment processor with name Bruc Bond(controlled by Eyal Nachum and Tamir Zoltovski), which has identical business model with GNI.

Another scam website on the link above :
findiban.com

The article said Findiban is a private payment venture of GNI CEO Liudvikas Kulikauskas and his wife Egle Kulikauskiene(additional info about Findiban : https://fintelegram.com/globalnetint-ceo-launched-new-financial-services-venture-findiban/).

Another info about Findiban :
https://fintelegram.com/lithuanian-compliance-issue-findiban-website-switched-into-maintenance-mode/

https://fintelegram.com/follow-the-money-global-markets-scam-proceeds-laundered-via-globalnetint/

Scam companies name :
Global Markets
Cubic Services Ltd, Seychelles
Lemster Services Ltd(website : www.lemster.eu, location : Larnaca, Cyprus, director : Sarah Amy Grice)
Praxis Cashier

The scam is broker scam. There is something I noticed from the article above, Sarah Amy Grice was appointed as a director for more than 20 firms in the UK, this pattern(one person appointed as a director for a lot of companies) is similar like Yomtov, Lianna, Serge, Daniel.

https://fintelegram.com/follow-the-money-cartu-brothers-and-globalnetint/

There was a binary options scam group with name Cartu Brothers with 3 main members inside it : David Cartu as the leader, Joshua Cartu, Jonathan Cartu. They had bank accounts at GlobalNetInt(GNI).

Companies involved with Cartu Brothers scam :
GreyMountain Management Ltd
Mega Optimization Ltd(dba MegaCharge)
Wirecard UK & Ireland(director : Michelle Molloy)
Worldwide CurrencyPlace OU(director : Jonathan Tsarfati/Jonathan French)
Captiva Cay Ltd(director : Jonathan Tsarfati/Jonathan French)
Captiva Cay Platforms Ltd
Sandbox Media Ltd(director : Jonathan Tsarfati/Jonathan French)
Flamingo Gardens Capital Ltd(director : Jonathan Tsarfati/Jonathan French)
Honeydew Trading Ltd
CyberRock Entertainment N.V.

https://fintelegram.com/aml-another-chief-compliance-officer-departs-from-globalnetint/

Scam companies involved with GNI :
ZotaPay(Zota Technology Ltd)
AstroPay(AP Global Corporation LLP)
Pacific Private Bank
South American International Bank of Curacao
CN International Bank
Euro Exim Bank

https://fintelegram.com/research-update-on-moneynetint-and-globalnetint

Gal Barak, a scammer from Israel laundered money via MoneyNetint Group to Online Prospect and DYISY Group of Simon Tetroashvili.

There are more scam companies on the link above : Triff Holdings, Golan Holdings, M-Net International Inc.

Director of 3 companies above is Raphael Golan.

https://fintelegram.com/exposed-fca-regulated-moneynetint-involved-in-big-style-money-laundering/

Global Payment Solutions and MoneyNetInt Ltd were involved with Gal Barak(Israel scammer with his company name E&G Bulgaria) and Uwe Lenhoff(Germany scammer with his company name Veltyo Group).

Uwe Lenhoff and Gal Barak did various scam(binary options, online brokerage, online gambling). Lenhoff also had LottoPalace(I think this was a website name, but I don’t know the website address).

Lenhoff had these merchants(Hithcliff Ltd, Option888, XMarkets, ZoomTrader, TradoVest, TradeInvest90 Ltd) at MoneyNetInt.

He laundered money using those merchants to his company Savora Consulting EOOD.

https://fintelegram.com/high-risk-payment-processor-moneynetint-goes-brazil-with-ripplenet/

There is someone with name Banco Rendimento working together with MoneyNetInt to establish a payment service in Brazil.

https://fintelegram.com/wirecard-finolita-and-the-lithuanian-connection/

Senjo Group, a payment company in Singapore has 2 subsidiaries : Finolita Unio UAB and oCap(previous name : Senjo Trading Singapore). Senjo Group is also the owner of PXP Financial, a company which has a cooperation with MoneyNetInt.

Senjo Group received a loan of €350m from Wirecard(a Germany company) in March 2020.

From the article above, Senjo Group transfered €35m to Wirecard COO Jan Marsalek and €65m to oCap.

oCap filed for insolvency in December 2020, thus its website is offline or under construction.

I don’t know why Senjo Group transfered €65m to its subsidiary, not to Wirecard. I suspect they did it to make the money “vanished”, because oCap website offline after Senjo Group transfered the money.

€35m + €65m = €100m, so that means Senjo Group still has to pay €250m to Wirecard and there is no info on that article about the rest of the money(€250m).

Because Senjo Group location is in Singapore, I suspect there is a connection between Mors Group in Malaysia and Senjo Group in Singapore.

I found a post on scammer info about “Wirecard” :

I suspect Wirecard post on scammer info is the same company with Wirecard on fintelegram.

From the info I gathered so far, GlobalNetInt and MoneyNetInt are famous among scammers because scammers used those companies to laundered the money they got from victims and the company itself seems to support scammer.

Around 1 week ago, I found a file with name “winscp.rnd” on my PC.
I have no idea why there was that file on my PC, after a bit googling I found out winscp is a file transfer software.
So I think those scammer hacked my PC again, but I have no idea how they got access to my PC.

Another IP which they used to attack my email :
2a0f:9407:bee:13f4:846b:9a4f:df75:1a84

Screenshot of scammer IP :

More info about Wirecard and other scam related to it :

James Henry O’Sullivan is accused of colluding with R Shanmugaratnam, a director of accounting firm Citadelle Corporate Services, to send a false document to a Dubai-based Wirecard subsidiary claiming Citadelle held more than $100 million in an escrow account.

https://fintelegram.com/the-new-main-suspect-in-the-wirecard-trial/
James Henry O’Sullivan is involved with Wirecard fraud and he is close to Jan Marsalek, a Wirecard COO.
There are 3 more people involved with Wirecard fraud : Markus Braun, Oliver Bellenhaus, and Stefan von Erffa.
Sullivan returned some of the money he got from Wirecard to Jan Marsalek and Markus Braun(CEO of Wirecard) via Finolita Unio UAB, a subsidiary of Senjo Group.
Based from the article above, Sullivan is the one who controlled Senjo Group. There is one more company in Singapore which involved with Wirecard fraud : Ruprecht.
Sullivan basically controlled Senjo Group, oCap, Ruprecht, Finolita.

James Henry O’Sullivan and Jan Marsalek bought 3 Indian payment companies in 2015, so Indian scammers are involved too.
This is probably the reason there are Indian scammers used Wirecard bank account like in this post :

Markus Braun and Jan Marsalek are on Europol most wanted list. There is an ongoing trial for Markus Braun and it said the trial will continue into 2024.

James Aga Wardhana and Chai Ai Lim, ex senior finance executives at Wirecard Asia Holdings sentenced 21 months and 10 months in prison in Singapore for their role in the widespread fraud going on at German payments firm Wirecard.

A former employee of Wirecard Asia Holding Pte Ltd(Wirecard Asia), See Lee Wee was convicted on 10 October 2023 for criminal breach of trust.
She was a controlling manager at Wirecard Asia. She reported to Chai Ai Lim(Chai), the Head of Finance at Wirecard Asia during the material time. Chai in turn reported to Edo Kurniawan(Edo), who was the former Vice President of Controlling and International Finance in Wirecard Asia.

A victim from Singapore got scammed by a company named SecuredOptions.
The victim transfered the money via MoneyNetInt to SecuredOptions.
There is a bank mentioned on the article above : Bank Millennium, in Warsaw Capital of Poland.

Eliran Saada is the owner of Express Target Marketing, which has operated the SecuredOptions and InsideOption binary options brands.
There are 2 victims mentioned on that article, one from Singapore and one from Sweden.
The victim from Sweden discovered that the company(SecuredOptions) had transferred his funds to Swedbank in Latvia, and from there to Ceska Sportilena(Erste Bank) in Prague.

About Swedbank, I found a post on scammer info :

I don’t know if the scammer on the link above is the same scammer from timeofisrael website or not.

More info about Mors Group and spam/phishing from Aldaniti :

Based from the website above, Mors Group is an unauthorized broker in Malaysia. It was founded in 2012.

There is no info about Mors Group is a broker on Mors Group website(morsgroup.com), so I suspect they hide the truth about Mors Group is a broker on their website.

Mors Group is the one behind these company/organization(Programs — MORS Group) :
Asia Corporate Excellence & Sustainability Awards(ACES Awards).
Website : www.acesawards.com

Aubrens.
Website : www.aubrens.com

The Gray Affair.

Beacons.
Website : www.beaconspost.com

This is info about spam/phishing from Aldaniti :

Scam websites :
key2news.info
aldaniti.net

Scammer IP :
91.126.175.226

Another info about company/organization related to Mors Group :

Scam company name :
Mors Group (Global) Limited/Morscapital

Scam website :
https://morscapital.com/

The company name is the same with Mors Group in Malaysia, the only different is “Global”. I think this is the same Mors Group. Morscapital location is in Seychelles.

This is the screenshot from Morscapital website :

“Morscapital is the trade name of Mors Group (Global) Limited, with IBC number : 220706.”
From my understanding, Morscapital is a part of Mors Group(or maybe Morscapital = Mors Group in different name).
That means Mors Group has 3 locations, one in Malaysia, one in UK, one in Seychelles.

There is a post mentioned about Morscapital :

More info about James Henry O’Sullivan, his company in the past and people related to him :

James Henry O’Sullivan had a company with name WALTECH LIMITED. His role was a CEO and his country of residence was Monaco. His date of birth : November 1974.
Address of WALTECH LIMITED was 54 Pont Street, London, England, SW1X 0AE.

This is info about WALTECH LIMITED :

People involved with this company :
James Henry O’Sullivan(Occupation : CEO, Role : Director, Country of residence : Monaco, Date of birth : November 1974).
Roy Philip Harding(Occupation : Chief Financial Officer, Role : Director, Country of residence : Luxembourg, Date of birth : October 1951).
Keith James Woodhead(Occupation : Chartered Accountant, Role : Director, Country of residence : Isle Of Man, Date of birth : November 1973).
Beverley Powell(Role : Secretary).
Sara Pinto.

WALTECH LIMITED previous name was WALPAY UK LIMITED and this is the info about WALPAY UK LIMITED :

Address of WALPAY UK LIMITED :
C/o Waltech Limited, 54 Pont Street, London, England, SW1X 0AE.
People involved with this company :
SDG REGISTRARS LIMITED(I think this is a company, not a person. Address : 41 Chalton Street, London, NW1 1JD).
David John Deneys Vanrenen(Role : Director, Nationality : Australian, Country of residence : Monaco, Occupation : Director, Date of birth : June 1944, Address : Le-Shangri-La, Flat 10b, 11 Boulevard Albert Premier, Monaco 98000, Monaco, Monaco).
Daniel Vanrenen(Role : Director, Nationality : Australian, Occupation : Trader, Date of birth : December 1978, Address : Flat 2, 105-107 Putney High Street, London, SW15 1SS).
Nigel Leigh Tose(Role : Director, Nationality : British, Country of residence : UK, Occupation : Director, Date of birth : May 1943, Address : 18 Wolverton Gardens, London, United Kingdom, W6 7DY).
Edwin Arthur Scholtz(Role : Director, Nationality : South African, Occupation : Consultant, Date of birth : June 1942, Address : 207 Rustenburg Square, Main & Chester Rds, Rondebosch, Cape 7700, South Africa).
Hugh Ronald Peter Reynolds(Role : Director, Nationality : British, Country of residence : England, Occupation : Co Director, Date of birth : May 1938, Address : 21 Ilchester Place, London, W14 8AA).
James Henry O’Sullivan(Role : Director, Nationality : British, Country of residence : Monaco, Occupation : Director, Date of birth : November 1974, Address : 260 Quai Kennedy, 1bd Louis Ii, Monaco 9800, Monaco, Monaco).
SDG SECRETARIES LIMITED(This is possibly not a person too. Address : 41 Chalton Street, London, NW1 1JD).
HAL MANAGEMENT LIMITED(Possibly not a person too. Address : Hanover House, 14 Hanover Square, London, W1S 1HP).
Beverley Powell(Role : Secretary, Nationality : British, Occupation : Secretary, Address : 77 Birchwood Avenue, Hatfield, Hertfordshire, AL10 0PT).
Roy Philip Harding(Role : Director, Nationality : British, Country of residence : Luxembourg, Occupation : Cfo, Date of birth : October 1951, Address : C/o Waltech Limited, 54 Pont Street, London, England, SW1X 0AE).

WALPAY UK LIMITED previous names : WALTECH PLC, WALTECH SERVICES PLC, WALTECH SERVICES LIMITED, WALTON TECHNICAL LIMITED.

Info about WALTON TECHNICAL LIMITED :

Address of WALTON TECHNICAL LIMITED :
46 Duthie Road, Tarves, Ellon, Aberdeenshire, AB41 7JX.
People involved with this company :
Dorothy Walton(Role : Secretary and Director, Nationality : British, Country of residence : Scotland, Date of birth : August 1964, Occupation : Administrator, Address : 46 Duthie Road, Tarves, Aberdeenshire, AB41 7JX). This is quite odd, her role was a Secretary and also a Director.
Sean Michael Walton(Role : Director, Nationality : British, Country of residence : Scotland, Date of birth : October 1960, Occupation : Instrument Engineer, Address : 46 Duthie Road, Tarves, Aberdeenshire, AB41 7JX).
Alison Margaret Adam(Role : Director, Nationality : British, Date of birth : September 1959, Occupation : Assistant Accountant, Address : 75 Snipe Street, Ellon, Aberdeenshire, AB41 9FW).

Keith James Woodhead was involved with PXP Financial Limited and PXP Financial Group Limited. Senjo Group is the owner of PXP Financial and considering Keith James Woodhead was a director of both companies, that means Keith James Woodhead possibly has direct connection to Senjo Group.
Info about PXP Financial Limited and PXP Financial Group Limited :

PXP Financial Limited previous names : KALIXA ACCEPT LIMITED, CQR UK PAYMENT SOLUTIONS LTD, NORDICONE LIMITED.
PXP Financial Group Limited previous names : KALIXA PAYMENTS GROUP LIMITED, SERVEBASE GROUP LIMITED, ABACUS PARTNERS LTD.
Address of both companies : The Corn Mill, 1 Roydon Road, Stanstead Abbotts, Hertfordshire, SG12 8XL.

There were 2 people on PXP Financial Limited and PXP Financial Group Limited with Senjo Group address : Timothy William Johnstone and Gavin Richard Lock.
Their address was : Senjo Group Pte. Ltd., #56-00 One Raffles Place, Singapore, Singapore, 048616.
I noticed something odd about Timothy and Gavin on PXP Financial Limited, they were appointed on May 31 2017 and resigned on May 31 2017, so appointed and resigned on the same day. I don’t think a normal company will allow something like this.
On PXP Financial Group Limited, Timothy was appointed on May 31 2017 and resigned on October 15 2017. Gavin was appointed on May 31 2017 and resigned on April 4 2022.
Similar pattern again like Yomtov, Lianna, Serge, Daniel, Sarah(appointed as a director and their role was terminated not long after that).
I suspect there is a connection between Yomtov, Lianna, Serge, Daniel, Sarah, Timothy, Gavin.

Timothy William Johnstone is currently active as a director in another company : ELDER TREE TECHNOLOGIES LIMITED.
Address of ELDER TREE TECHNOLOGIES LIMITED is St James House, St James Square, Cheltenham, Gloucestershire, England, GL50 3PR.
Info about ELDER TREE TECHNOLOGIES LIMITED :

Timothy William Johnstone address in ELDER TREE TECHNOLOGIES LIMITED is Carrick House, Lypiatt Road, Cheltenham, Gloucestershire, United Kingdom, GL50 2QJ.
There is someone else in that company : Philippa Johnstone and her address is St James House, St James Square, Cheltenham, Gloucestershire, England, GL50 3PR.
Both of them are director of ELDER TREE TECHNOLOGIES LIMITED.

Timothy and Philippa are also director of another company : ARCHBRIDGE COMMERCE LIMITED.
Info about ARCHBRIDGE COMMERCE LIMITED :

Address of ARCHBRIDGE COMMERCE LIMITED is Inglewood Farm Templeton Road, Kintbury, Hungerford, Berkshire, United Kingdom, RG17 9SL.
Philippa full name in that company is Philippa Jane Johnstone.

More info about scam websites with address L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil and other scam related to it :
https://www.reddit.com/r/Scams/comments/ho6xt8/newest_scam_ive_encountered_1st_red_flag_was_it/
Scam website :
user-id78263.com
Address :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil.

Scam website :
myminersworld.com
Address :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil.

https://fraudfighters.online/viewtopic.php?t=24384
Scam website :
dnipro-edu.com
Address :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil.

Scam website :
marsgoal.net
Address :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil.

Scam websites :
giveawayexperience.net
airgiveaway.net
marsmania.net
airgiveaway.net
giveawaytime.net
giveawaywallet.net
galaxygiveaway.net
giveawayrocket.net
freedomgiveaway.net
flytogiveaway.com
getmarsdollar.com
marsgoal.net
customergiveaway.com
Address of all those websites :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil.

From the post above, someone said Elon Musk scammers are from Nigeria and on myantispyware website, the scam websites which impersonated Elon Musk have same address : L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil. This is same address with The Digital Bulldogs. This made me suspect the scammers behind Elon Musk scam are a part of Ahmed Olabisi Ajayi group.

Another info about scammer impersonating Elon Musk :

Scam website :
openai23.live
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

One of Elon Musk scam website registrar is Nicenic International Group Co Limited, so I did some research about Nicenic International Group and this is some info about Nicenic International Group :

https://www.scamadviser.com/check-website/eu-meds.net
Scam website :

Based from info on rxadviser website, the company behind eu-meds.net is Nicenic International Group Co Ltd.
One of these 3 locations is a real location of Nicenic International Group : China, Malaysia, Australia.
Based from info on scamadviser website, IP of eu-meds.net is 111.90.147.182 which belong to Shinjiru Technology Sdn Bhd, a company in Kuala Lumpur Malaysia.

https://www.reddit.com/r/Scams/comments/10mioht/any_information_to_tradepaircom_i_think_i_got/
Scam website :
trade-pair.com
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam website :
used-heavy-machinery.com
Scam company details :
Company Name: BCN VENT ONE
Address: Av. de Josep Tarradellas, 38
City: Barcelona
Zip Code: 08029
Country: Spain
Registration Number: B02947083
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam website :

Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam website :
postoffice-depot38.com
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scammer BTC address :
13gLPLLKhwxvMJJDvwrqSRw3QrdDfgoqXX
Scam website :
2xtsla.org
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam website :
Qtumcoin.net
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED
Scammer email :
[email protected]

More info about websites with Nicenic International Group Co Ltd as Registrar on scammer info :

I suspect the scammers behind Linus Tech Tips youtube channel hacked and the other hack are possibly a part of Ahmed Olabisi Ajayi group.

There is some info about websites with Shinjiru Technology Sdn Bhd as the Registrar :

Scam website :
sign1-netflix4.com

Scam website :
electrifylux.com

https://www.group-ib.com/blog/cryptoslabs-investment-scams/
Scam company/group name :
CryptosLabs

Scam website :
cannabisprimesale.com

https://db.aa419.org/fakebanksview.php?key=140002
Scam website :
eufloriclittletrees.com

Info about people opinion of Shinjiru Technology Sdn Bhd :
https://www.reddit.com/r/webhosting/comments/pmkg4h/shinjirucommy_is_a_scam/

Some post about Shinjiru Technology Sdn Bhd on scammer info :
https://scammer.info/t/fake-uk-norton-support-numbers-and-websites/45683
https://scammer.info/t/finnish-euthanasia-scam-german-whatsapp-number/134516
https://scammer.info/t/www-eirmed360-com/56944/2
https://scammer.info/t/scammers-hack-webcams-to-make-secret-recordings/32500/3
https://scammer.info/t/australian-toll-free-scam-numbers/44421
https://scammer.info/t/ee-phishing-scam/54562
https://scammer.info/t/scotiabank-phishing-scam/37448/2

1 Like

More info about scam websites with Nicenic International Group as the registrar, scam website with address Global Gateway 8, Rue de la Perle, Providence, Mahe, Seychelles, scam websites with address L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil, scam website with address Suite 305, Griffith Corporate Centre, Beachmont Kingstown, St. Vincent and the Grenadines, scam related to New Century Infocomm Tech :

Scam website :
circle-ci.com
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam website :
miner.ebang.cn.com
Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam website :

Registrar :
NICENIC INTERNATIONAL GROUP CO., LIMITED

Scam websites :
blockearn.net
coinlaps.net
swancoins.net
coinreef.net
toyomail.top
Registrar of all scam websites above except toyomail :
NICENIC INTERNATIONAL GROUP CO., LIMITED
Scammer IP :
194.180.49.249
198.46.81.50
194.87.151.39

https://www.reddit.com/r/CryptoCurrency/comments/87azw9/ugly_truth_of_micromoney_amm_coin_a_sophisticated
Scam company name : AMM Token Distribution Company Ltd.
Company registration number: 199903.
Address : Global Gateway 8, Rue de la Perle, Providence, Mahe, Seychelles.

Scam website :
barclays247.com
Scammer phone number :
+447572992551
Scammer IP :
198.54.115.108
Website address :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil

https://www.scamadviser.com/check-website/juju52.com
The website above(juju52.com) has an address :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil.
Website IP is 220.228.6.69 which belong to New Century Infocomm Tech. Co. Ltd, a company in Taiwan.

I did a research about New Century Infocomm Tech and I found some info about it :

Scammer email :
[email protected]
Scammer IP :
113.196.35.201(New Century Infocomm Tech IP)
195.54.167.151
175.111.182.2
202.62.37.129

Scam website :
luga.net.ua
Scammer email :
[email protected]
[email protected]
[email protected]
Scammer phone number :
+2348189839542
Scammer IP :
175.181.243.133(New Century Infocomm Tech IP)

Based from some info above, I guess there are Nigerian scammers in Taiwan and those scammers are possibly a part of Ahmed Olabisi Ajayi group.

https://forum.lowyat.net/topic/4371897/all
Scam website :

Address :
Suite 305, Griffith Corporate Centre, Beachmont Kingstown, St. Vincent and the Grenadines

This is forex scam in Malaysia and the address of the scam website was Suite 305, Griffith Corporate Centre, Beachmont Kingstown, St. Vincent and the Grenadines.

Another IP which they used to attack my email :
87.249.135.117
185.181.244.65
207.244.228.142
190.103.88.9
105.214.19.52
185.104.14.207
167.179.40.132
103.154.141.231
108.65.52.97
190.242.24.150

Screenshots of scammer IP :