This campaign centers on busfile.org, a domain registered on November 18, 2024 through PDR Ltd. d/b/a PublicDomainRegistry.com, operating in conjunction with the toll-free number 888-701-6450. The domain's recent registration date is consistent with a purpose-built scam infrastructure designed to impersonate government business registration authorities, particularly targeting LLC owners and small business operators.
The operational method documented in community reports involves busfile.org sending official-looking correspondence — both physical mailers and emails — to business owners, falsely claiming that annual report filings or registration renewals are imminent and that a card on file will be charged. One recipient confirmed that after checking Virginia's actual state business portal, LLCs in that state do not file annual reports, and no fee was legitimately due for their company. Another report notes that busfile.org charges approximately $250 for LLC registration services that the actual government charges at a fraction of that cost, framing the operation as a deceptive filing service that exploits the gap between official fees and what unsuspecting business owners are led to pay.
The emails reference specific business names and owner names, as seen in reports addressed to individuals such as "Sunil Pai," indicating the campaign uses harvested or purchased business registration data to lend credibility to its outreach. The personalization of these messages increases the likelihood that recipients will treat them as legitimate government or administrative notices rather than solicitations from a third-party service.
The relationship between busfile.org and 888-701-6450 is established through co-reporting at a confidence score of 0.50, with the association appearing twice in the relationship data, suggesting recipients encountered both the domain and the phone number within the same fraudulent communication. The phone number carries zero FTC complaints in the current dataset, which may reflect the campaign's relatively recent launch following the domain's late 2024 registration, rather than an absence of consumer harm.
The geographic targeting appears to include at least Virginia, based on the state-specific detail provided in one community report, though the use of email and direct mail as delivery channels suggests the campaign is not geographically constrained and likely reaches business owners nationally. The personalized nature of the outreach and the exploitation of real business registration data represent a moderately sophisticated social engineering effort. Given the domain's youth, the confirmed use of misleading official-looking correspondence, and the documented intent to extract $250 or more per target under false pretenses, this campaign represents a moderate-to-elevated threat with clear potential for financial harm at scale as it matures.