Tuesday, 11 December 2018
Friday 8 June 2012
Mobile Phone Users Targeted by
Dodgy PPI Scam
Slough residents complain about junk text messages
PPI reclaim service
Local residents have received annoying text messages urging them to go to
www.ppinow.org and get help claiming compensation from High Street banks.
PPI means 'Payment Protection Insurance'. Some banks sold bad PPI policies
to some of their customers. A compensation scheme has been set-up.
The government's financial services regulator the Financial Services Authority
(FSA) says claiming compensation is easy and individuals can do it themselves.
The FSA is offering free advice and a claim form on their web site at http://www.fsa.gov.uk/consumerinformation/product_news/insurance/payment_protection_insurance_/claim-back-ppi
This is one of several messages received by local residents
From : +44 7752 262029
Date : Wednesday 6 June 2012
We have been trying to contact you regarding your PPI, We now know how much you
are owed, please visit www.ppinow.org to confirm your details
+44 7902 905598 used for the identical message on 3 July 2012.
Please report these SPAM messages
Dynamoo's Blog has an interesting
article, written in October 2011, about the instigator of this particular
scam and his activities with www.loanslineuk.co.uk (details of loanslineuk.co.uk
are shown at the bottom of this web page.)
Also on the Dynamoo Blog is this advice on how to forward these annoying text
messages to your own mobile phone provider.
How to be Aware of the Frauds
A knowledgeable person told the Slough Times the scams tend to work by:
- Inducing people to provide personal information that may support identity theft
activities at a later time. See
- Phoning the person and passing themselves off as being bona fide [a similar
method involves pretending to be a bank or credit card fraud department] and
stating [in PPI scams] that you're owed money by a bank or financial institution
but need to pay a
release fee [in advance].
- This is usually explained away as being an
admin fee to cover research and
- They reassure the person it is refundable after the monies are released.
- Inevitably, people like the idea they are owed money by a bank and are
[presently] being told to pay the
fee using Ukash vouchers [see
- Once a person has paid the cash, the fraudsters realise they've hooked another
unsuspecting and gullible victim. The fraudsters then phone their victim and states
the payment has not yet been received and that double the fee needs to be paid
immediately or the compensation funds will not be cleared and the victim will
lose their only opportunity to get paid a lot of compensation.
- Amazingly, people continue to be duped, until eventually they come to realise
they've been scammed. By then, it is too late. They have paid money to the
fraudsters and received nothing in return.
- Victims have been know to spend money they don't have in a vain and desperate
attempt to gain thousands of pounds in promised compensation.
- These crimes are called
419 scams. They are seemingly endless. The fraudsters
always prey on the gullible, vulnerable and weak. A search on Google shows
A Slough Times investigation has revealed:-
- Telephone number 07752-262 029 is allocated to telephone provider:-
which operates in Britain as
O2 Telecommunications. It rents landlines,
provides landline and radio broadband and operates BT's former Cellnet mobile
- www.ppinow.org has IP address 126.96.36.199
- That IP address has no host name
Host 188.8.131.52.in-addr.arpa. not found: 3(NXDOMAIN)
indicating very sloppy Internet set-up, at best, or something dodgy at worse.
That IP address was allocated on 2011-10-10 to:-
Web Commerce Communications Limited
When accessing www.ppinow.org the user is automatically diverted to
Lot 2-2 Incubator 1 Technology Park Malaysia Bukit Jalil
57000 Kuala Lumpur
IP address 184.108.40.206 belongs to a Internet hosting company
The Internet host name for IP address 220.127.116.11 is:-
2676 LT Maasdijk
No where on the so-called www.ppinow.org web site is there a street address
or telephone number which indicates a potentially fraudulent operation.
On web page
there is, in the
source coding, several references to "writeoffppi.com" including
Domain writeoffppi.com was registered on Thursday 3 May 2012 to:-
© Writoffppi.com, all rights reserved
Technical E-Mail: email@example.com
Technical Tel: +44.1614083744
M14 6GH is actually 2-52 Whitby Road, Manchester (even
Email address domain "tetr.us" is not actually registered to the USA
government or to the USA state authorities. It was registered on Tuesday 6
October 2009 to:-
Telephone country code +66 is allocated to Thailand.
Domain name tetrustelecoms.com was created on 16 October 2008 and is currently
42 whitby road
Registrant Phone Number: +66.838273350
Registrant Email: firstname.lastname@example.org
Domain name tetrustelecoms.com is currently
pattaya, chon buri 20107
suspended and is not hosted
(meaning it is not operational).
Company Tetrus Limited:-
Also on that same web page (http://18.104.22.168/myppi.info/default.php) in
the source coding is reference to:-
Doman myclaimuk.com is not currently registered.
Interestingly, from the redirected web address of
SUITE 72 CARIOCCA BUSINESS PARK
2 SAWLEY ROAD
Company No. 06424187
Status: Dissolved 22/03/2011
Date of Incorporation: 12/11/2007
Company Type: Private Limited Company
Nature of Business (SIC): 6420 - Telecommunications
Last Accounts Made Up To: 30/11/2008
Last Return Made Up To: 12/11/2009
List of directors available.
is a reference to myppi.info
Domain name myppi.info was registered on 6 April 2012 to:-
IP address 22.214.171.124 is registered to an Internet hosting company:-
Fundacion Private Whois
myppi.info has address 126.96.36.199
myppi.info mail is handled by 10 mail.myppi.info.
There is currently no web site on 188.8.131.52 or on myppi.info or on
The Daily Telegraph has an
article on Mr McNeish's business activities including the selling of mobile
telephone numbers and personal data.
Unit 8.2, 8 Floor, Menara Aik Hua
Changkat Raja Chulan
- Domain name loanslineuk.co.uk was created on 11 June 2010. It is currently
Domain name netchemistry.info is no longer registered.
IP address 184.108.40.206 is not currently hosting web sites, but
flat 3 11a whitworth street
loanslineuk.co.uk has address 220.127.116.11
loanslineuk.co.uk mail is handled by 0 mail.netchemistry.info
states that same IP address has previously hosted mydebtgone.com
Domain name mydebtgone.com is no longer registered.
Additional research shows:-
mydebtgone.com - 18.104.22.168 - this is the same IP address as item 22 above.
Domain name mydebtgone.net was created on 22 July 2010 and is currently
mydebtgone.co.uk - 22.214.171.124 - not registered.
mydebtgone.net - 126.96.36.199 - registered, see below.
Web site mydebtgone.net has, in the web page's source code, these
Domain name netchemistry.co.uk was registered on 29 September 2005. It is
currently registered to:-
Domains By Proxy, LLC
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
(480) 624-2599 Fax -- (480) 624-2598
mydebtgone.net has address 188.8.131.52
mydebtgone.net mail is handled by 10 mailstore1.secureserver.net
mydebtgone.net mail is handled by 0 smtp.secureserver.net
When one seperates
mail.mylifecoveruk.com.netchemistry.co.uk into 2 domain
names, one gets mylifecoveruk.com and
netchemistry.co.uk. Searching mylifecoveruk.com .....
The registrant is a non-trading individual who has opted to have their address
omitted from the WHOIS service.
netchemistry.co.uk has address 184.108.40.206
netchemistry.co.uk mail is handled by 0 mail.mylifecoveruk.com.netchemistry.co.uk
No match for "mylifecoveruk.com" in the registrar database.
mylifecoveruk.com has address 220.127.116.11
Interestingly, 18.104.22.168 is the same IP address mentioned at 22 above.