Company Representative scams, Payment Processing scams and other Employment scams.
#352400 by LSBARTHELEMY Sat Jan 13, 2018 3:46 pm
Hello from France,
Could you please advise if you have already come across the following employment fraud.
Indeed I am victim of a fraud related to US visa grant services proposed by e-mail,
further to my reply by e-mail to a so-called job offer from the firm BHP BILLITON located in HOUSTON, USA.
That so-called firm asked me then to contact a so-called immigration attorney, for him to process my US visa and work permit.
My first suspicions were:
- The exaggerated amount requested to secure my US visa and work permit: $20,780
$4,000 (American Offshore Travel Insurance Certificate) (delivered by an attachment to an e:mail, but I could not locate the address of that so-called insurance company)
$4,180 (visa fee and work permit fee)
$5,700 (police clearance form) (delivered by an attachment to an e:mail)
$400 (police clearance form, US/EUR exchange rate adjustment)
$6,500 (US oil & gas expatriate association registration fee)
TOTAL = $20,780
Indeed, after cross-checking with a fellow French citizen who had already performed the request for
the same type of visa (H-1B), the latter told me that such a visa cost him less than $10,000.
- The too optimistic promise made on 13 February 2017 to deliver my visa before 26 March 2017.
Indeed, after cross-checking with the same fellow French citizen who had already performed the
request for the same type of visa (H-1B), the latter told me that such a visa is subject to a lottery
(in April-May at earliest) and that I could not expect to start that job before October at earliest.
- Eventually, the pursuit of additional suspicious payment fees related to my US visa grant, that I
refused to pay:
$9,700 ("Affidavit Of Good conduct").
Then I processed the following steps:
- I notified BHP BILLITON by e:mail of a fraud related to their company name (no news from BHP BILLITON since).
- I proposed to that “immigration attorney” to contact my lawyer: I got no news from that person since.
Moreover, I got the confirmation that I was victim of a fraud when I realised that a fake BHP BILLITON Human Resource e:mail was used:
[email protected]
Indeed, that e:mail:
- was used to send me the BHP BILLITON job offer (on 09 Feb 2017),
- was used to ask me to contact that “immigration attorney” (on 13 Feb 2017),
- was used to recommend me ‘'independently” to pay the 1st US visa securement fee (20 Feb 2017),
- is no longer available, since I got the following automatic reply: “We could not remit your message.
Although several attempts were performed to deliver your message, we failed to interrogate the DNS so as to get information from the recipient domain location” (on 13 feb 2017).
I raised a claim to the nearest police department from my home in France. The French police officer warned me that I would have few chances to get France to raise an international fraud claim procedure to the USA. Indeed such a procedure is expensive, and it was not yet proven that many other fellow French citizens have been victims of such a fraud. I am therefore left with waiting for checking whether my complaint is dismissed or not. In such a case, I would have to lodge a complaint against persons unknown.
That is why I need your advice whether you have seen such similar frauds.
Thanks to call me back on xxxxx.

Regards,

xxxx
Last edited by AlanJones on Sat Jan 13, 2018 3:52 pm, edited 2 times in total. Reason: Removed name and phone number.
Advertisement

#352401 by AlanJones Sat Jan 13, 2018 3:56 pm
Unfortunately, it is a common scam, targeting people looking to work overseas, with the sole aim of charging them fake visa/travel fees.

Original WhoIs data:
Registrant Contact Information:
Name Reginald Mongeur
Organization Mongeur
Address 10 Lodestar Hl
City Randolph
State / Province VT
Postal Code 05060
Country US
Phone +1.8027283100
Fax +1.8027283100
Email [email protected]


It appears that the domain is now registered to an Intellectual Property firm, most likely working on behalf of the legitimate company

It is almost certain that the scammers aren't actually in the USA and have used fake/stolen details for the domain registration.

ETA: Email address [email protected] was also used to register 2 other (now expired) domains using a totally different name and address.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#352452 by Photosensitive Sun Jan 14, 2018 6:56 am
The registrant also has the following domains:

bhpbllllton.com
bhpbillitonfoundation.com
bhpbillitonfoundaton.com
bhpbillitonfoundation.net
bhpbillitonfoundaton.net
bhpjapan.com
bhpnihon.com
bhpzhongguo.com

The real BHP Billiton is at https://www.bhp.com
#352642 by LSBARTHELEMY Tue Jan 16, 2018 3:14 am
- I stopped contacting them, although they tried again to hook me with 4 similar employment scams.
- Unfortunately I sent them the money through international money orders.
- As regards the e-mails, I will post through 4 separate messages. Basically they were e-mails from 3 different actors:
1. The "recruitment coordinator": correct written english.
2. The "BHP Human resources manager": correct written english. Good knowledge of HR skills. Indeed I worked for 25 years in the oil & gas industry and I did not detect any lack of competence in his messages.
3. The "immigration attorney": correct oral english. Written english sometimes correct, sometimes with typical mistakes from a french speaker or a spanish speaker. The "immigration attorney" was the one who would call me on the phone and speak english to me. My wife noticed he seemed to have an accent from Eastern Europe. In retrospect, I also felt that there were 2 persons acting as "immigration attorney": Indeed I would receive twice almost identical e-mails in a short amount of time.
Regards.
#352643 by LSBARTHELEMY Tue Jan 16, 2018 3:16 am
"Recruitment Coordinator":

MESSAGE:

Employment Offer For BHP Billiton Petroleum US

From: [email protected]
To: [email protected];
BCC: [my e-mail]
Date: 01/02/2017 13:33

Reliable Energy Consultant
Address: 12 Greenway Plz # 1100,
Houston, TX 77046, USA
Email: [email protected]


All responses must be sent to this email: [email protected]


Attn: Sir/Madam,


Subject: Reliable Energy Consultant


The Human Resources department of BHP Billiton Petroleum US has found
your experience and qualifications suitable for our requirements.
Send your most recent resume and certificates for screening and
verification.
Please indicate your present salary and your preferred salary.


Total Years of Experience:-
Years of experience in Oil & Gas companies:-
Current Salary per Month USD:-
Preferred salary USD:-


Yours Sincerely,
April Wood
Recruitment Coordinator


MESSAGE PROPERTIES -> MESSAGE DETAILS:

Received: from HE1PR0101MB2010.eurprd01.prod.exchangelabs.com (10.167.185.148)
by VI1PR0101MB2015.eurprd01.prod.exchangelabs.com (10.167.205.149) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.860.13 via Mailbox
Transport; Wed, 1 Feb 2017 12:33:09 +0000
Received: from HE1PR01CA0027.eurprd01.prod.exchangelabs.com (10.163.2.165) by
HE1PR0101MB2010.eurprd01.prod.exchangelabs.com (10.167.185.148) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.860.13; Wed, 1 Feb
2017 12:33:08 +0000
Received: from HE1EUR02FT056.eop-EUR02.prod.protection.outlook.com
(2a01:111:f400:7e05::208) by HE1PR01CA0027.outlook.office365.com
(2a01:111:e400:58e8::37) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.874.12 via
Frontend Transport; Wed, 1 Feb 2017 12:33:08 +0000
Authentication-Results: spf=pass (sender IP is 125.209.208.215)
smtp.mailfrom=naver.com; audencia.net; dkim=none (message not signed)
header.d=none;audencia.net; dmarc=bestguesspass action=none
header.from=naver.com;audencia.net; dkim=none (message not signed)
header.d=none;
Received-SPF: Pass (protection.outlook.com: domain of naver.com designates
125.209.208.215 as permitted sender) receiver=protection.outlook.com;
client-ip=125.209.208.215; helo=cmailsend06.nm.naver.com;
Received: from cmailsend06.nm.naver.com (125.209.208.215) by
HE1EUR02FT056.mail.protection.outlook.com (10.152.11.21) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.874.2 via Frontend Transport; Wed, 1 Feb 2017 12:33:06 +0000
Received: (qmail 2578 invoked by uid 100); 1 Feb 2017 12:33:03 -0000
Received: from 10.114.49.162 (HELO cweb26.nm.nhnsystem.com) (10.114.49.162)
by cmailsend06.nm.naver.com with SMTP;1 Feb 2017 12:33:03 -0000
Date: Wed, 1 Feb 2017 21:33:03 +0900
From: April Woodie <[email protected]>
Reply-To: April Woodie <[email protected]>
To: <[email protected]>
Message-ID: <[email protected]>
Subject: =?UTF-8?B?RW1wbG95bWVudCBPZmZlciBGb3IgQkg=?=
=?UTF-8?B?UCBCaWxsaXRvbiBQZXRyb2xldW0gVVM=?=
Content-Type: multipart/alternative;
boundary="----=_Part_73559_1401671004.1485952383252"
X-Naver-CIP: 162.218.229.106
CC:
BCC: <<my e-mail>
Return-Path: [email protected]
X-MS-Exchange-Organization-Network-Message-Id: 6ca203bb-22a9-4d16-c98a-08d44a9e7a25
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 04675859-f78e-4fd9-9630-a83e46ab5aea:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: CIP:125.209.208.215;IPV:NLI;CTRY:KR;EFV:NLI;SFV:NSPM;SFS:(6009001)(8196002)(2980300002)(438002)(199003)(252514010)(189002)(626004)(55666002)(85226003)(246002)(16003)(4001430100002)(8676002)(189998001)(84326002)(6862003)(106466001)(19627405001)(63266004)(3450700001)(2351001)(33646002)(86362001)(5660300001)(450100001)(7596002)(63326003)(22756006)(7696004)(8896002)(43066003)(110136003)(77096006)(733005)(7636002)(38730400001)(8666007)(54356999)(17816001)(356003)(6306002)(90146999)(512874002)(81686999)(9686003)(107886002)(50986999)(1250700005)(1096003)(471984002)(1736001)(71626007)(93766001);DIR:INB;SFP:;SCL:1;SRVR:HE1PR0101MB2010;H:cmailsend06.nm.naver.com;FPR:;SPF:Pass;PTR:cmailsend06.nm.naver.com;A:1;MX:1;LANG:en;
X-MS-Office365-Filtering-Correlation-Id: 6ca203bb-22a9-4d16-c98a-08d44a9e7a25
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(81800161)(8251501002)(71702078);SRVR:HE1PR0101MB2010;
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Exchange-Antispam-Report-Test: UriScan:(254630465236479);
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(9101531078)(601004)(2401047)(13016025)(13018025)(8121501046)(9101536074)(10201501046)(3002001);SRVR:HE1PR0101MB2010;BCL:0;PCL:0;RULEID:;SRVR:HE1PR0101MB2010;
X-MS-Exchange-Organization-SCL: 1
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;HE1PR0101MB2010;23:Iff6OGIRWlt84TgyLJqWd2b3pqDaH9Jxt5M39Ly?=
=?us-ascii?Q?m6/5EuMkjTwVc9ZOJr6WnzOWh2H1NiIZMpSwqqhfCrr/xmi4pkVLQwS/bQeV?=
=?us-ascii?Q?0J7Yhzc2G+JaREYTWLXZ9ap9H91jKsJBVduT41Y6SN553wglkP7jC+OrKoPI?=
=?us-ascii?Q?qGoLf3UxXM5IwS0iDwlhHKiBRrS0SemlaOJ4iQHgKOPuZWLMEH3cIIY77u1f?=
=?us-ascii?Q?y98rxmDfmZcElxoUGpTh+Hf63/WKabcccB430TMED3o4Hw2f8INGUTMuAkO2?=
=?us-ascii?Q?uNyhjAJSqLW4+O/oK4i9inbxe4gS6XplbVJ8XjOCjifISY7NnvjAuAl9DlPd?=
=?us-ascii?Q?fjhYZIbCjzdCipcGTnAkG1UdFchN/Xz7d2gkL5Qc7E0eq6XobtM9vaSOFSKg?=
=?us-ascii?Q?5W4CubUkYC6eH3gxvk8mf0XbQDZJbSITVrXJ/1QWNrY1+aGaY7aq3I/w/vsM?=
=?us-ascii?Q?1n+io5fheUWuyHEmLSdxcqYw3VPa5gxPLtBHgIz7Q8lNm4hEf08yyoz2VlOO?=
=?us-ascii?Q?oWPuV6z8C09yD7gJYwY4SH+wM3vzj5ucgn/pWXCDoPNSZlflxGTzHp4EXc3D?=
=?us-ascii?Q?J3OD5wusVsSX7W4QhplO2sKRHgpgrwKHJyS43xzsCzr39aTusMyrkdpMmGNA?=
=?us-ascii?Q?xMVS6VzwqiI7YU74Xuk4Fe6GHb491HTPrP1QTibXMy5DHu3xQFKayiGsl5f6?=
=?us-ascii?Q?zwDWPc1ejNnCgjkXeqzyCfSIJ7SqM/98Q4sxS/lkiWGILvVl7L1Tin6K0ykd?=
=?us-ascii?Q?rVKjnutPcp7M7EVotS9/t4yM2Hv+aF7EitoAA88yGSFz0S6XkjCcf7c/Necb?=
=?us-ascii?Q?EkZUhD6oZ9q5bG/2e93DHdtOjFXPZfUINomVT/hXCgLt3WDXw0/zSJW3nrY5?=
=?us-ascii?Q?rTdCJ0JC7/kGnTHzr+kS/PnyWY5ih2DUZqbLJBC32ir+C7QY8/yhjqnfReZq?=
=?us-ascii?Q?UVhUfvsibqrWUR73ERMQ/mjsS5gbRKwc2pkSr6N1fhkoR4BfZpAIGqH6OZL2?=
=?us-ascii?Q?1zCKM0aNkbRMtvx72M5Baa/TpHImAVAX1BquW9HZIma4JyBumENkrfqCxR/s?=
=?us-ascii?Q?Rbzd66ve1sQQDn2GgRxJoOOvsNDlbXRNTo7MMXu2RjKeD6wgTZxygv9x5H1K?=
=?us-ascii?Q?48QsQO1EWAP0nhQcjqy6jngIcEeIcns0nul8UDyQKMogat7bpyiMwqBH4vpw?=
=?us-ascii?Q?gP9eFOFw0fLXZqVecUy4Cdq6bH9wRtBQh/U1bkxC0SnkN+IvT2N4NIpdke9I?=
=?us-ascii?Q?XIEsfCr2UmxmL2tsPfVMG+c1Otl7q/YhZ/NQXqC3p?=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Feb 2017 12:33:06.7542
(UTC)
X-MS-Exchange-CrossTenant-Id: 04675859-f78e-4fd9-9630-a83e46ab5aea
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0101MB2010
X-MS-Exchange-Organization-AuthSource: HE1EUR02FT056.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.2617540
MIME-Version: 1.0
X-Antivirus: avast! (VPS 170203-0, 03/02/2017), Inbound message
X-Antivirus-Status: Clean
Last edited by AlanJones on Tue Jan 16, 2018 5:49 am, edited 3 times in total. Reason: Added quotes for clarity
#352644 by LSBARTHELEMY Tue Jan 16, 2018 3:18 am
"BHP HR Manager"

MESSAGE:

From:[email protected]
To: [my e-mail]
Date: 03/02/2017 01:03

BHP BILLITON PETROLEUM (DEEPWATER) INC
Address: 1360 Post Oak Boulevard Suite 150
Houston, Texas 77056-3020 United States
Email: [email protected]
Telephone: +1 (713) 357 6626
Fax Number: +1 (713) 961 8400


Attn: Sir/Madam,

Receipt of your resume has been acknowledged; due to global time difference and engagements, we are unable to conduct a telephone interview. We have resolved to online interview form to hasten the employment procedures. The form should be completed and submitted on or before 7 days. Please adhere to this instruction to avoid termination of the employment offer as a result of delay.


Best Regard,
Mr. Abid Husain
Human Resources Manager.



MESSAGE PROPERTIES -> MESSAGE DETAILS:

Received: from HE1PR0101MB2010.eurprd01.prod.exchangelabs.com (10.167.185.148)
by VI1PR0101MB2015.eurprd01.prod.exchangelabs.com (10.167.205.149) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.860.13 via Mailbox
Transport; Fri, 3 Feb 2017 00:03:44 +0000
Received: from AM4PR0101CA0040.eurprd01.prod.exchangelabs.com (10.167.254.50)
by HE1PR0101MB2010.eurprd01.prod.exchangelabs.com (10.167.185.148) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.888.16; Fri, 3 Feb
2017 00:03:42 +0000
Received: from HE1EUR02FT019.eop-EUR02.prod.protection.outlook.com
(2a01:111:f400:7e05::200) by AM4PR0101CA0040.outlook.office365.com
(2603:10a6:200:2e::50) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.860.13 via
Frontend Transport; Fri, 3 Feb 2017 00:03:41 +0000
Authentication-Results: spf=none (sender IP is 64.98.42.212)
smtp.mailfrom=bhpbillitonjob.com; audencia.net; dkim=none (message not
signed) header.d=none;audencia.net; dmarc=none action=none
header.from=bhpbillitonjob.com;audencia.net; dkim=none (message not signed)
header.d=none;
Received-SPF: None (protection.outlook.com: bhpbillitonjob.com does not
designate permitted sender hosts)
Received: from smtprelay.b.hostedemail.com (64.98.42.212) by
HE1EUR02FT019.mail.protection.outlook.com (10.152.10.70) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.888.7 via Frontend Transport; Fri, 3 Feb 2017 00:03:40 +0000
Received: from filter.hostedemail.com (10.5.19.248.rfc1918.com [10.5.19.248])
by smtprelay04.b.hostedemail.com (Postfix) with ESMTP id 1BBE97B614
for <my e-mail>; Fri, 3 Feb 2017 00:03:39 +0000 (UTC)
X-Session-Marker: 68724062687062696C6C69746F6E6A6F622E636F6D
X-HE-Tag: noise03_1fc4f3d1adc5e
X-Filterd-Recvd-Size: 120805
Received: from webmail.lycos.com (imap-ext [64.98.36.5])
(Authenticated sender: [email protected]@bhpbillitonjob.com)
by omf10.b.hostedemail.com (Postfix) with ESMTPA
for <my e-mail>; Fri, 3 Feb 2017 00:03:38 +0000 (UTC)
Content-Type: multipart/mixed; boundary="=_6a512fd8fd24a718eda4a421d7f6c976"
Date: Fri, 3 Feb 2017 00:03:38 +0000
From: BHP Billiton Petroleum Inc <[email protected]>
To: <my e-mail>
Subject: BHP Billiton Petroleum (Deepwater) Inc Assessment Form
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.1.5
X-Originating-IP: [31.223.2.224]
Return-Path: [email protected]
X-MS-Exchange-Organization-Network-Message-Id: 3b8e0313-21d4-43e6-200b-08d44bc81ca8
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 04675859-f78e-4fd9-9630-a83e46ab5aea:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: CIP:64.98.42.212;IPV:NLI;CTRY:CA;EFV:NLI;SFV:NSPM;SFS:(6009001)(8196002)(2980300002)(428002)(189002)(199003)(252514010)(108616004)(356003)(7636002)(189998001)(83506001)(110136003)(38730400001)(4001350100001)(2476003)(92566002)(450100001)(2160300002)(84326002)(16003)(107886002)(8666007)(6916009)(6266002)(93046001)(7736002)(33646002)(5890100001)(54356999)(3380100001)(1096003)(8896002)(8676002)(24736003)(6116002)(53416004)(3846002)(626004)(50986999)(101416001)(3250700002)(86362001)(270700001)(246002)(512874002)(2351001)(512954002)(66066001)(36756003)(4610100001)(55920200001)(21490400002)(6966002)(568964002)(105586002)(5660300001)(106466001)(471984002);DIR:INB;SFP:;SCL:1;SRVR:HE1PR0101MB2010;H:smtprelay.b.hostedemail.com;FPR:;SPF:None;PTR:smtprelay0212.b.hostedemail.com;MX:1;A:1;LANG:en;
X-MS-Office365-Filtering-Correlation-Id: 3b8e0313-21d4-43e6-200b-08d44bc81ca8
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(81800161)(71702078);SRVR:HE1PR0101MB2010;
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Exchange-Antispam-Report-Test: UriScan:(209352067349851);
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(102415395)(9101531078)(601004)(7630418)(2401047)(8121501046)(13023025)(13024025)(13016025)(13018025)(7631346)(7632255)(7633261)(9101536074)(3002001)(10201501046);SRVR:HE1PR0101MB2010;BCL:0;PCL:0;RULEID:;SRVR:HE1PR0101MB2010;
X-MS-Exchange-Organization-SCL: 1
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;HE1PR0101MB2010;23:evd7tgSkw1SqOBjuhsvEDFxYECdgVPi5KF17KdW?=
=?us-ascii?Q?rYl/NkclxfmeXPUG1MerKgIw8JhltJDB0Y9aeGp04IMF23aj9jt24uDdNBY9?=
=?us-ascii?Q?o8xs0rYeC48/zP1o+wn5MvXvXEl95Mi+n3NOyLLy/KeuEUv8NSIwLnT8KJ4D?=
=?us-ascii?Q?d9AAJ97fHPa7W8qdWjb5DNVgFI1V10XnrnUDAPjxm0HAOYsLOzWpPMhTX7GI?=
=?us-ascii?Q?jSgMQfRU/sVjdJX4q3uOBse3u3EuyfXRNr5KGWgIn8vNYkIaVZQXBjbNbbod?=
=?us-ascii?Q?XpidVG3hRHv5DwyPbasgtntMsI70El44jM6ye0LvcwUNHkeTZyyE/5kOt8Dn?=
=?us-ascii?Q?+/nt/o5Wb98Qsk0nHrZg/h2Say0duzQ1yjoGiRlQfLJYJVxH52+ej4Msvma3?=
=?us-ascii?Q?+0TUHlNTrqtokr/FjYXcvuQ3GU5t92A4GeLMM0+AYufMQhBXdtcW2rnAqVQl?=
=?us-ascii?Q?kTMT+Q7Tn10b8Ita5GmHx5onCWOPkze4j5mUdjdVs//QBLrqbNd17NPc3Pys?=
=?us-ascii?Q?jZ2uyLRSJwpBifsDuak+w1+x8nVsVE+SBRJZb0irV/iQAkyuB6RouEKYSlD3?=
=?us-ascii?Q?dwLLFh0h1lbv03kdH+ZoPdkWN6KJ1toOtLToWKgMjfZDd79NGJk4QqA5Mtrf?=
=?us-ascii?Q?0yLDkwd4hmpsLUqcNc1doW8oBc1t7Xyba44zjD4xsWcV5o6G0kOFJaamOhtg?=
=?us-ascii?Q?xYAuy0q18iQTJKHGHCQ407rEC5khh7sSrGLq4OslLsiaTym52lYxyfMYusId?=
=?us-ascii?Q?k+lZOBSxeBZYWNd8GtfAHLQIS2kgBqv4qHF/w+uwNST6AkTE88FNRz6yvIkK?=
=?us-ascii?Q?UcjuggrHlLtjEN83IDgiVAJdscyklltveRC6M0gn7YwqHxlzq7xSmysBlHA+?=
=?us-ascii?Q?xIdfc1wT9ARpThnj4GYQjjMBE4rZQIK3ER7MGd60zY6qcrCC1LrfYAydnVOB?=
=?us-ascii?Q?WryukgkAwHWOqKaA1MElPyZZEYz5Sy+Wie3ioxoXsgX0Hs0AjechrVZzX3Fl?=
=?us-ascii?Q?T/JiVLUezLXZEFdpb/Dwl/1Nj96sXFAwpy1mvqiGEZomnfsuHe85Ge64Fdr0?=
=?us-ascii?Q?9jXrSrh3ZPLy0KnJpeBo6Gd6ZHBUoLox6TvmypP6dAHOh/LbyNqovmvQifx1?=
=?us-ascii?Q?cG7HvCj6k8FL3bOewWNnLTsZ+gDksNDL+amjAn1qMMuEej3F5z+F5bAKLxHi?=
=?us-ascii?Q?J/3mOuVGp0oZ/4p2G0MhXtwQTmo0Ed0X9Hq3/tEqiSS5T0/SOy3RcOebe5m4?=
=?us-ascii?Q?ebZDNSG/wgieHLbQVi/rxw4nW1Lu/OyovCL1/EML+FyiKQuknRFZeGFf/v+X?=
=?us-ascii?Q?0J5oT3Os8vsHZt2RwqhfWw1eVBkozVLEcgPUoaeOUcFxHTRh3CISk/BV8r+l?=
=?us-ascii?Q?qjMUO5TX/fuCg34sAowGIBOu16t0qVxdI46cXdY7ej8WYC06c?=
YT0I8Em0z3KsJ8gHgD4kL28=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Feb 2017 00:03:40.4436
(UTC)
X-MS-Exchange-CrossTenant-Id: 04675859-f78e-4fd9-9630-a83e46ab5aea
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0101MB2010
X-MS-Exchange-Organization-AuthSource: HE1EUR02FT019.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.6157048
MIME-Version: 1.0
X-Antivirus: avast! (VPS 170203-0, 03/02/2017), Inbound message
X-Antivirus-Status: Clean
Last edited by AlanJones on Tue Jan 16, 2018 5:52 am, edited 4 times in total. Reason: Added quotes for clarity
#352646 by LSBARTHELEMY Tue Jan 16, 2018 3:18 am
"Immigration Attorney"

MESSAGE:

From:[email protected]
To: [my e-mail]
Date: 17/02/2017 16:34
Subject: Re: BHP Billiton Petroleum (Deepwater) Inc Offer Letter

Ryan Law Firm
Address: 6161 Savoy Dr Ste 1116 Houston,
TX, 77036-3326 USA.
Telephone: +1 (713) 489-0390
Telephone Mobile: +1 (832) 915-1265
E-mail: [email protected]

Attention: [My name]

I have received your email. There are three stages involved in the employment of expatriates in United States. You will send the following required documents to me, so that I can make an application for you with the United States Immigration Service for the approval of your Resident/worker's Permit and Visa.

1. A scanned copy of your international passport.
2. Offer Letter from BHP Billiton Petroleum US
3. American Offshore Travel Insurance Certificate (AOTIC)

The American Offshore Travel Insurance Certificate (AOTIC), is a mandatory requirement by the Immigration and Nationality Act (INA) this is because the policy is a prove that you are medically fit; to work in United States and also it is a per-requisite to renew your resident/worker's permit once it expires. (AOTIC) should have benefits to the tune of $12,500 000.00 (TWELVE MILLION, FIVE HUNDRED US DOLLARS) and the duration is one year, it should include benefits for loss of luggage, repatriations, medical, permanent disability and death etc.

The preferred insurance company by the United States Immigration Service isSWIFT PRECISION INSURANCE PLC. SWIFT PRECISION INSURANCE PLCis a government owned insurance company located in Washington, USA. You can purchase the Insurance certificate at your location or I can get it for you here in US at your own expense, while BHP Billiton Petroleum Oil will reimburse you on your arrival in US.

These documents should be submitted to United States Immigration Service Office within a week to enable your permit to be approved. When the permit has been approved, all relevant documents backing it will be forwarded to the American embassy in your location. Also your own copy will be sent to you, which you will be expected to present at the American embassy upon their official invitation.

Please we guide interested applicants to indicate their correct/present address, telephone and fax through which the American Embassy will contact you for official invitation upon approval of the work permit by the United States Immigration Service office. Attached is the United States Immigration Service form. Please go through the form carefully before filling it properly.

These are the vital procedures which you must adhere to because it is in accordance to the" Expatriate Statutory Laws of the United States.

Contact me if you can not find the American Offshore Travel Insurance Certificate (AOTIC) at your location.

Yours Sincerely,
Barrister. David Michael Ryan
IMMIGRATION ATTORNEY


MESSAGE PROPERTIES - MESSAGE DETAILS:

Received: from DB5PR0101MB2007.eurprd01.prod.exchangelabs.com (10.167.224.149)
by VI1PR0101MB2015.eurprd01.prod.exchangelabs.com (10.167.205.149) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.888.16 via Mailbox
Transport; Fri, 17 Feb 2017 15:34:59 +0000
Received: from HE1PR01CA0021.eurprd01.prod.exchangelabs.com (10.163.2.159) by
DB5PR0101MB2007.eurprd01.prod.exchangelabs.com (10.167.224.149) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.888.16; Fri, 17
Feb 2017 15:34:56 +0000
Received: from HE1EUR02FT028.eop-EUR02.prod.protection.outlook.com
(2a01:111:f400:7e05::206) by HE1PR01CA0021.outlook.office365.com
(2a01:111:e400:58e8::31) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.919.13 via
Frontend Transport; Fri, 17 Feb 2017 15:34:55 +0000
Authentication-Results: spf=pass (sender IP is 65.55.90.236)
smtp.mailfrom=outlook.com; audencia.net; dkim=pass (signature was verified)
header.d=outlook.com;audencia.net; dmarc=pass action=none
header.from=outlook.com;audencia.net; dkim=fail (body hash did not verify)
header.d=outlook.com;
Received-SPF: Pass (protection.outlook.com: domain of outlook.com designates
65.55.90.236 as permitted sender) receiver=protection.outlook.com;
client-ip=65.55.90.236; helo=SNT004-OMC4S33.hotmail.com;
Received: from SNT004-OMC4S33.hotmail.com (65.55.90.236) by
HE1EUR02FT028.mail.protection.outlook.com (10.152.10.102) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.904.16 via Frontend Transport; Fri, 17 Feb 2017 15:34:54 +0000
Received: from NAM02-BL2-obe.outbound.protection.outlook.com ([65.55.90.199]) by SNT004-OMC4S33.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Fri, 17 Feb 2017 07:34:53 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=1E2JlbBDLu/hS3NkHddKLg3Q6pQaO9GtKJ5Med3tIng=;
Received: from BL2NAM02FT048.eop-nam02.prod.protection.outlook.com
(10.152.76.53) by BL2NAM02HT226.eop-nam02.prod.protection.outlook.com
(10.152.76.201) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.904.16; Fri, 17
Feb 2017 15:34:51 +0000
Received: from CO2PR18MB0138.namprd18.prod.outlook.com (10.152.76.58) by
BL2NAM02FT048.mail.protection.outlook.com (10.152.76.109) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.904.16 via Frontend Transport; Fri, 17 Feb 2017 15:34:50 +0000
Received: from CO2PR18MB0138.namprd18.prod.outlook.com ([10.161.83.27]) by
CO2PR18MB0138.namprd18.prod.outlook.com ([10.161.83.27]) with mapi id
15.01.0888.034; Fri, 17 Feb 2017 15:34:50 +0000
From: David Michael Ryan <[email protected]>
To: <my e-mail>
Subject: Re: BHP Billiton Petroleum (Deepwater) Inc Offer Letter
Thread-Topic: BHP Billiton Petroleum (Deepwater) Inc Offer Letter
Thread-Index: AQHSiTHuLYhqMxEhgk+FhF8xnjZtzaFtVBJk
Date: Fri, 17 Feb 2017 15:34:50 +0000
Message-ID: <[email protected]od.outlook.com>
References: <[email protected]>
In-Reply-To: <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: audencia.net; dkim=none (message not signed)
header.d=none;audencia.net; dmarc=none action=none header.from=outlook.com;
x-incomingtopheadermarker:
x-tmn: [rj6HJnm5rqa86ARk25DAY1TLopvQxMok]
x-incomingheadercount: 38
x-eopattributedmessage: 1
X-Forefront-Antispam-Report-Untrusted: EFV:NLI;SFV:NSPM;SFS:(10019020)(98900012);DIR:OUT;SFP:1102;SCL:1;SRVR:BL2NAM02HT226;H:CO2PR18MB0138.namprd18.prod.outlook.com;FPR:;SPF:None;LANG:en;
X-MS-Office365-Filtering-Correlation-Id: 1fe46301-9ec8-4a3e-c6be-08d4574a8631
X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(22001)(201702061060)(5061506541)(5061507331)(1603103135)(1601125222)(1603101373)(1701031045);SRVR:BL2NAM02HT226;
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(432015087)(444000031);SRVR:BL2NAM02HT226;BCL:0;PCL:0;RULEID:;SRVR:BL2NAM02HT226;BCL:0;PCL:0;RULEID:(102415395)(9101531078)(601004)(2401047)(7630418)(8121501046)(13016025)(13023025)(13018025)(13024025)(7631346)(7632307)(7633261)(9101536074)(3002001)(10201501046);SRVR:DB5PR0101MB2007;BCL:0;PCL:0;RULEID:;SRVR:DB5PR0101MB2007;
x-forefront-prvs: 02213C82F8
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Default
Content-Type: multipart/mixed;
boundary="_004_CO2PR18MB01384A2D50E82BF0CA37E49FB45D0CO2PR18MB0138namp_"
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2NAM02HT226
Return-Path: [email protected]
X-OriginalArrivalTime: 17 Feb 2017 15:34:53.0168 (UTC) FILETIME=[623D2F00:01D28933]
X-MS-Exchange-Organization-Network-Message-Id: 1fe46301-9ec8-4a3e-c6be-08d4574a8631
X-EOPTenantAttributedMessage: 04675859-f78e-4fd9-9630-a83e46ab5aea:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped: HE1EUR02FT028.eop-EUR02.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:65.55.90.236;IPV:NLI;CTRY:US;EFV:NLI;SFV:SPM;SFS:(8196002)(2980300002)(438002)(252514010)(189002)(377454003)(199003)(8666007)(99286003)(6306002)(55016002)(15974865002)(54896002)(33656002)(236005)(626004)(3720700001)(4620100001)(325944008)(54356999)(77096006)(74316002)(5890100001)(8896002)(8676002)(4610100001)(246002)(1096003)(7696004)(450100001)(512934002)(84326002)(53546006)(73756004)(229853002)(5660300001)(2950100002)(87572001)(567704001)(38730400002)(551944002)(6916009)(2900100001)(110136004)(104016004)(21480400002)(16003)(50986999)(6246003)(189998001)(4050100002)(19627405001)(102836003)(99936001)(2476003)(76176999)(106116001)(7906003)(6376002)(63106013)(606005)(733005)(106466001)(356003)(122556002)(61614004)(25786008)(956001)(7636002)(92566002)(575784001)(86362001)(82202002)(568964002)(97354003)(369734003);DIR:INB;SFP:;SCL:5;SRVR:DB5PR0101MB2007;H:SNT004-OMC4S33.hotmail.com;FPR:;SPF:Pass;PTR:snt004-omc4s33.hotmail.com;MX:1;A:1;CAT:SPM;LANG:en;
X-DkimResult-Test: Passed
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(81800161)(8251501002)(3001016)(3010002)(71702078);SRVR:DB5PR0101MB2007;
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Exchange-Antispam-Report-Test: UriScan:(189930954265078);
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;DB5PR0101MB2007;23:rVpq6MnyWJHBREiPkimHgRq+/jInDh6RtDxKauZ?=
=?us-ascii?Q?HWmc/TNYZzo+snKXKuUFb8x1fCIQ9g5kvA1G1I+0fA3YedZ/z+nsBuM55nwu?=
=?us-ascii?Q?z0I4JSuW5wirBC5BGserNzazJzudh3ZjmjI5Oba7hDzRgQkdGIRllhjpRMp8?=
=?us-ascii?Q?TiA5vm1vI3aeJDmFM+gUdUqpW1CsB6BGNZRjDdIvHcNA7vphQjIGM38Eu3Hb?=
=?us-ascii?Q?eX5Hy0Rdk/+vIJZvGBFgeKXwcbOs4v0Jk5m8GR9WdcKGi6hdau2spqSZhh5h?=
=?us-ascii?Q?OWVzF92n0GaL0Z4O9dyaP5jnypsQ7nYmwfM5qowawdT9wTEyECFTU8xbekAu?=
=?us-ascii?Q?KxszIZm96aCKh6mKC5Ap1vlvhNoe4rKPzy4s/qZEiKmyi3AwBfy8KAuHhMrr?=
=?us-ascii?Q?haAVHcBhEB82GDdKBQUu69Ioyy4z3oPJ41AO+bdjfuG1zmaPzbcIoLpBEzz8?=
=?us-ascii?Q?7KI5YsNR+6eFFw6CNZ0ljoCuKtHV7bb92WluKeYSPNXhWIE7zJiw02ShVuDr?=
=?us-ascii?Q?HCZP4IH4fwV+Sdp8avQvt5Ywba12TrN8h0JIiRffcNLtaj30MHujsFrT3bSH?=
=?us-ascii?Q?1fgHOBZP2k24FS95b/1zu+d1lKcQJRTvNDdT8pJNCwB19bj3LHiSxbQSVe+s?=
=?us-ascii?Q?g641a21Zsk2ibJW9tvP+gMKG1f9xKiZu9pLmMe4rNgsITFAqHWtFqpfClBkN?=
=?us-ascii?Q?3HibGxOAarCGY7r1ZSncVoG107QQ8Qsw8GLTG2EmS7vWJdEI3OqGbnGIURew?=
=?us-ascii?Q?zVaML0A+7b5U/qGNQGGI0McMWhBQN5F+7qrTS3SpsHHIBcXfWZtuT1u9beMC?=
=?us-ascii?Q?mz4i19FjRaRFIqbQmpE94F2aDuJejT1wyvhEyDoCLXzY5janU8+fNLufDhGe?=
=?us-ascii?Q?dKfGhSnuNgiK7xC9LAXWUhP7qv0OqCZi2hplGZm3b7Isn3NKdDmt2DwcIWOp?=
=?us-ascii?Q?9UjUTBn4hCH8rvuMCMaP18x38Tsko+4A1trTMztvN6LhcepO0jQ3DkoW5OLR?=
=?us-ascii?Q?bxeOHZr/4VcpBBqb2Sk24VGkAToHnYo/tW8f7FIrVB5pDvZXk+FjPIUGk+IW?=
=?us-ascii?Q?JUKatJjpQUBGxty+OVm/vbU21cGKxwp/xIDlzYFoH7hag6nwqmzxbcv/SCE4?=
=?us-ascii?Q?mudOLSxFKlSd5LcvhIx4qA/meHEvwGMRkg9g24dE6JAuG2pTJdzcyhZ3rt8j?=
=?us-ascii?Q?8XxLvdyj1BkANN+lRlkJXDnFzKLx7t2OuLuXWLCnCW0+x5T8bbZeegvrOTDF?=
=?us-ascii?Q?lJCGnAnQMgSaIca1OPr5VXscgcSxSNxDCrwOV7Q/Q4Nch8qzoRfRcn9w/RNl?=
=?us-ascii?Q?e2jX5Ia9POBJnxwSDHPQtOLBLMa1Y6fqq2Ta+Nwh0xXoBxv4i1ow3I1YB6Sp?=
=?us-ascii?Q?gcm2LbKoBLB4xkij50lBPOLPXGdzLsKY+5UtKtmFbub1VMjYk+qJE8f/DmBh?=
=?us-ascii?Q?pFmsA7B+wYX8Uen3U4xa6IzDzd95pU0tIlv8T+Z4XpgVj2lo1PvYIERS26yJ?=
=?us-ascii?Q?XSB+/1L2iKFodZLZHdkEYvOv1nJ90lAJijaJPqM7vK0m9Idy+7Ib1v21lQqg?=
=?us-ascii?Q?fBLBPifvkjmBqJmg+KnTL1AXOEwhe/V25Di7QKl1E4sn1s6UOyQmorAIGY0T?=
=?us-ascii?Q?sxVBqEonZ33Z/4K8m6NxlAR/Wne/Q676DCRKHUVtwBZJqDy3+fIyIgeLHP4N?=
=?us-ascii?Q?oPdDFBQqbi9vGlOkt10ZtHm2r+qNDGwVGR10kmn0KpJ8gdAKM9GdxKIiPF+d?=
=?us-ascii?Q?9ZhPayew0wIUCN1svbsyc2r7OO44ue/BFWAlHyQL5T5INjliqaYWjg6Ck2pQ?=
=?us-ascii?Q?i+JDw8RP4kH94?=
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Feb 2017 15:34:54.8250
(UTC)
X-MS-Exchange-CrossTenant-Id: 04675859-f78e-4fd9-9630-a83e46ab5aea
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR0101MB2007
X-MS-Exchange-Organization-AuthSource: HE1EUR02FT028.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.7463259
MIME-Version: 1.0
X-Antivirus: avast! (VPS 170221-0, 21/02/2017), Inbound message
X-Antivirus-Status: Clean
Last edited by AlanJones on Tue Jan 16, 2018 6:32 am, edited 4 times in total. Reason: Added quotes for clarity

Who is online

Users browsing this forum: No registered users and 3 guests