Intro
This is an advance fee fraud scam going around. I’ve reported what I can about them. As explained in the post about spell caster scams, this is linked to them. Also, they might be linked to just one loan scammer.
“Agents”
Note: These are not in any specific order.
1
Email: [email protected]
Money mule info (from PayPal invoice sent to me):
Nontsika Sonakile
886 Umzimvubu St
Vanderbijlpark 1901
Phone: +27 71 777 8124
Email: [email protected]
Grabify:
| Date/Time | 2022-01-18 18:14:14 UTC |
|---|---|
| IP Address | 197.185.110.145 |
| Country | South Africa, Johannesburg |
| Orientation | portrait-primary |
| Timezone | Africa/Johannesburg GMT+2 |
| User Time | Tue Jan 18 2022 20:14:23 GMT+0200 (South Africa Standard Time) |
| Language | en-ZA |
| Incognito/Private Window | No |
| Ad Blocker | No |
| Screen Size | 360 x 740 |
| Local IP | 192.168.8.103 |
| GPU | Mali-G72 |
| Browser | Samsung Browser (16.0) |
| Operating System | Android 10 |
| Device | Samsung Galaxy S9 |
| Touch Screen | Yes (5 touch points) |
| User Agent | Mozilla/5.0 (Linux; Android 10; SAMSUNG SM-G960F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/16.0 Chrome/92.0.4515.166 Mobile Safari/537.36 |
| Platform | Linux aarch64 |
| Referring URL | no referrer |
| Host Name | rain-197-185-110-145.rain.network |
| ISP | rain |
Device screenshot:
PayPal invoice:
2
(Credit)
A Happy New Year from the illuminati, i hope the year is treating you
nicely but if not then i am glad to get a feedback but before i head
on with the enlightenment on what you need to know before making your
decision below is a brief about myself.
My name is John Ashworth Opia, a certified initiator ordained to reign
lights to those in need of breakthrough to dwell on with dignity just
as they have always imagined or dream to live.i live in Nyc, Usa. Am
an entrepreneur,i deal on export and import and i also own a few
businesses too.
I got initiated in the year 2000 and became an agent in 2010,the
Illuminati has made me believe in myself,taught me how to stay or have
positive mindset over life which has redeemed me thoroughly,it made
life easier in all way round so ever since I became
a member through the help of Victor my mentor I promised the
illuminati to always help those who are interested in the organization
so as to transform their lives just as mine was transformed,well i can
boldly say i have introduced thousands of young and old into the light
that unites and guides all from where ever countries they come from by
getting them initiated into the brotherhood,after initiation we help
every member grow positively in their doings such as
networking,business growth,politics power,money to invest,sponsors on
personal talent or any wish they make and also help them regain all
what they have lost in the past and to gain more.
The illuminati organization is a society that doesn’t destroy unless
there is a need to,we take care of our own and we stand by every clan
on what ever wishes they make both financially,networking and
spiritually.
I know you must be very surprised on how we got to your profile,well
for your notice we contact people individually based on how the spirit
of light leads us so take this as an opportunity to see your dream
come through as a member of the light.
We choose people and of which out of all few are chosen. The great
association as
been in existence since May 1, 1776 named The Illuminati (aka
Bavarian Illuminati). What does this mean? The name derives
from the Latin Illuminati, which means \“the enlightened\” Who
are the Illuminati? They are in essence, a cartel or groups of
elite people. These people are basically rich, intelligent, or
possessed special skills of various kinds and industrialists
based Worldwide. The names of certain families persist over
long periods of time. Some of the most important names are
Rothschild, Rockefeller, Morgan, Lazard, Warburg, Schroder
and Schiff.
Every clan deserves every opportunity to be great so we make that
happen at every given cost cause we rule the world. Many of the
world’s political leaders & celebrities you read of are members of
this great organization so when you
become a member you will have the opportunity to be great
and to dine with great potential personnel’s in the organization from
different nations. We rule
every social part of the world; business firms, music, sports
and politics, the second essential component is controlling of
the media. It is controlled through business fashion. We choose people
with potentials and we have made them great
turning them to what they are today. We are here for you to
make your dream come through; if you can dream it ,you can
achieve it.
Our course is to help revive mankind by making life easier for those
under the light of the organization by making their dreams come
through in what ever way they might seek,we don’t do bloodshed as the
media and false rumors claims,we are one family and we care for other
in what ever way a clan must have requested help or support from.
It is good to believe in a seen course,this is not just about
spiritualism but unity and freedom to become what ever you want to be,
be it evil or good the decision is yours in life. This simply means
when you become a member you have the choice to become evil or good,we
support both so do not look at the organization with just negativity
cause darkness comes with light and we are the light.
And after initiation every new clan gets issued a membership
certificate degree that’s certifies one as a bonafide member of the
illuminati and once that’s done there is a fixed price of $650,000,00
we give out to every new member as a reward in an offshore bank
account including a bank card to help pay debts/stabilize their
financial needs before business or deals to help them grow including
all other benefits that could help your household be it good health
medicines or more in positive measures.
When you merit your degree membership certificate,you will have to
make a decision on two options which are the BAD OR GOOD ways of
living.
This means the ball is in your court to become who ever you want to be
cause we support light and darkness cause without darkness there won’t
be light so everyone has the right to become what ever they wish.
Your task is to reach out to those worthy of the Light,to share
kindness when it’s needed,to be ruthless when it’s called for and
there will also be a task for you to bring in a total of 5members
yearly.
The catch also requires a sacrifice,yearly you will be tasked to
sacrifice a mountain goat as your seed sowing for the betterment of
every new year.
Please note: human sacrifice won’t be asked for unless you choose to
become a powerful politician,entertainer with awards and fame beyond
measures.
A lot of people do get a different conclusion or impression about the
brotherhood because of conspiracies online which are not true and only
those who gets to obtain their membership degree can testify to how
good we are to our own and every member is entitled to his or her own
freedom. So tell me,how eager and prepared are you to join the
illuminati?
Where are you from originally?
How old are you and your marriage?
At the scale of 10 how would you describe your health?
What would your 5 wishes be?
And what’s your current occupation and where do you see yourself in five years?
Regards,
John Ashworth.
PayPal Email of the Scammer: [email protected]
IPs of the scammer:
| Date/Time | 2022-01-10 15:18:34 UTC |
|---|---|
| IP Address | 197.184.182.217 |
| Country | South Africa, Germiston |
| Orientation | landscape-primary |
| Timezone | Africa/Johannesburg GMT+2 |
| User Time | Mon Jan 10 2022 17:18:39 GMT+0200 (South Africa Standard Time) |
| Language | en-US |
| Incognito/Private Window | No |
| Ad Blocker | No |
| Screen Size | 1366 x 768 |
| GPU | Intel, Intel(R) HD Graphics Family |
| Browser | Chrome (96.0.4664.110) |
| Operating System | Windows 10 x64 |
| Touch Screen | No |
| User Agent | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 |
| Platform | Win32 |
| Referring URL | https://www.google.com/ |
| Host Name | reverse.rain.network |
| ISP | rain |
| Date/Time | 2022-01-10 15:17:27 UTC |
|---|---|
| IP Address | 41.216.202.229 |
| Country | South Africa, Randburg (Cresta) |
| Orientation | landscape-primary |
| Timezone | Asia/Shanghai GMT+8 |
| User Time | Mon Jan 10 2022 23:17:27 GMT+0800 (China Standard Time) |
| Language | en-US |
| Incognito/Private Window | No |
| Ad Blocker | No |
| Screen Size | 1366 x 768 |
| GPU | Intel, Intel(R) HD Graphics |
| Browser | Chrome (96.0.4664.110) |
| Operating System | Windows 8 x64 |
| Touch Screen | No |
| User Agent | Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 |
| Platform | Win32 |
| Referring URL | no referrer |
| Host Name | reverse.rain.network |
| ISP | rain |
3
Info about [email protected]:
WhatsApp number is +234 915 540 3201 and +1 (618) 571-5202
Cash App tag of $1217becky (name is Rebeca Hernandez)
Bitcoin address of 1GAUCGrJinA9pWyhPzRRz15ivxnWUwxAC7
Asked me to use MoonPay.com to buy Bitcoin
Did not provide bank transfer as a payment option this time
I also logged him on Grabify:
| Date/Time | 2022-01-17 20:14:54 UTC |
|---|---|
| IP Address | 104.243.212.177 |
| VPN/Proxy Detection NEW! | This IP may be a VPN or Proxy |
| Country | United States, New York |
| Timezone | Africa/Lagos GMT+1 |
| User Time | Mon Jan 17 2022 21:14:55 GMT+0100 (WAT) |
| Language | en-GB |
| Incognito/Private Window | No |
| Ad Blocker | No |
| Screen Size | 375 x 812 |
| GPU | Apple GPU |
| Browser | Mobile Safari (15.1) |
| Operating System | iOS 15.1 |
| Device | Apple iPhone |
| Touch Screen | Yes (5 touch points) |
| User Agent | Mozilla/5.0 (iPhone; CPU iPhone OS 15_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Mobile/15E148 Safari/604.1 |
| Platform | iPhone |
| Referring URL | no referrer |
| Host Name | 104.243.212.177 |
| ISP | M247 Ltd |
Note: I’m pretty sure they’re not in New York. The IP address seems to be used for Hotspot VPN, and their time zone is still in Lagos.
4
Info about [email protected]:
Device screenshot + banking info:
(Going to add in the banking info in plain text too in case someone searches it)
Bank Name: Chime Bank
Bank Address: P.O. Box 417 San Francisco, CA 94104 USA
Account Number: 031101279
Routing No. 169147356334
Account Holder Name: Betty Craig (?? - given there PayPal name, I’m assuming this is it, but I could be wrong)
I think the banking app in that screenshot is Chime bank.
PayPal email: [email protected]
PayPal name: Betty Craig
Screenshot:
WhatsApp number: +234 704 055 0645
Also, this guy got really mad. He told me that I deserve to die, spammed me with video calls, etc.
5
Email: [email protected]
Email account name: Dr. Unity
Payment details (requested payment via World Remit money transfer):
ACCOUNT NAME,: Oyinbo oseremen
ACCOUNT NUMBER :6860003835
SWIFTCODE FIDELITY: FIDTNGLA
IBAN NUMBER: GB71CITI18500810407909
SORT CODE: 070041251
City: Benin City
country: Nigeria
state: edo state
| Date/Time | 2022-01-21 18:35:52 UTC |
|---|---|
| IP Address | 102.23.96.8 |
| Country | Nigeria, Lagos |
| Orientation | portrait-primary |
| Timezone | Africa/Lagos GMT+1 |
| User Time | Fri Jan 21 2022 19:35:59 GMT+0100 (West Africa Standard Time) |
| Language | en-US |
| Incognito/Private Window | No |
| Ad Blocker | No |
| Screen Size | 360 x 800 |
| Local IP | 10.214.145.39 |
| GPU | PowerVR SGX Doma |
| Browser | Opera Mobile (58.0.2254.58441) |
| Operating System | Android 10 |
| Device | OPPO A15 |
| Touch Screen | Yes (5 touch points) |
| User Agent | Mozilla/5.0 (Linux; U; Android 10; CPH2185 Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.106 Mobile Safari/537.36 OPR/58.0.2254.58441 |
| Platform | Linux armv8l |
| Referring URL | Gmail |
| Host Name | 102.23.96.8 |
| ISP | Oplay-Digital-Services |
6
First name: sylvanus
Middle name: osawhanhol
Surname:Alexander
Amount: $250
Country :Nigeria
Address Edo state .
I thought this was just a random money mule (and for all I know, maybe it is), but they might be complicit.
Redirecting... this is a photo used in Illuminati recruitment scam spam on https://www.migratorybirdfestival.com/forum, and it’s been posted on Facebook on November 20th, 2012 (how long has this been happening???) by someone named Sylvanus Alexander (same name as money transfer recipient). Also, we can tell from their Friends and family members list that they probably live in Nigeria, and they’re “self-employed”.
They have a few other friends and family members in Nigeria that also seem to be “self-employed”, but I am NOT going to accuse them of anything just because they’re self-employed people in a poor country.
Also, if they’ve really become a scammer, I feel a bit sad for them. They seem to have had the chance to get a legitimate job before, and were even pursuing doing just that:
If they’re really a scammer, I wonder what “broke” in their mind that drained them of so much empathy to the point they’d be willing to scam.
7
They contacted me via [email protected] and told me this:
A lot of people say lies about us, that they aren’t even sure of, they say how we worship the devil, and hate Jesus Christ, and also how we perform sacrifices and diabolic acts, these are lies, we are not even religious nor is Illuminati a Religion, I am a member of the illuminati, but I believe in God, I‘m a born christian and a Roman catholic. Do you really want to know what the illuminati stands for?
I want you to know that you have been chosen by the Illuminati brotherhood,And you have a great destiny and bright future ahead with the Illuminati organization.We choose you for you to help enlighten the courage and strength of the Illuminati and to those who are in need of help, interested contact me via email… [email protected]…Or what’sApp…+1(201)6894484
Payment methods are available by contacting the “seller” at the email [email protected] this time (usually they just do it through one or two emails, but this time they have a spammer, a scammer, and a seller).
His Bitcoin address is apparently bc1qgq34z6rqjqepyvh0ej462gtrwvw53x4acmx4pd, but it doesn’t have any transactions.
I then say that when I tried to buy Bitcoin, Coinbase crashed, but I restarted my phone and Cash App is working again, so he sends me the Cash App tag $Yemi217.
I went to cash.app/$Yemi217 and this guy’s name seems to be Yahaira Torres, although this might just be a money mule or an alias.
Then, I pretend that someone else is scamming me. I say I need to pay the IRS missing taxes via Cash App or else I’ll go to tax jail, so I need to use Zelle instead.
His Zelle email is [email protected].
8
This was being spammed quite a bit around 1/22/2022:
From: ILLUMINATI TRIPLE 6 [email protected]
(no subject)What do you want the Illuminati to do for you?..
We don’t ask everybody this question.
I’m only asking because I feel you need help, and I would like change your life for good.
but if you don’t need my help… We can act like we never texted.
Do have a nice day…
Email he spams with: [email protected]
Then directs people to the “grand master” at [email protected]
He’s also heartless as hell:
They’ve been using the [email protected] email for a while, actually. I was receiving scams from him dating back to January 14th (9 days ago at the time of writing).
How they send out scams
They primarily use email, but they also spam on various forums, blogs, etc. Some links to where they’ve spammed at:
- https://www.wattpad.com/user/maamarazaq (judging from https://haveibeenpwned.com’s indexing of Wattpad, they are probably signing up for the forums they spam on using the same email/phone number that they post in their spam)
- https://www.migratorybirdfestival.com/forum
- https://www.goodreads.com/topic/show/21859295-i-need-a-spell-caster-to-help-bring-back-my-ex-lover-2021
