**Scam Campaign Report: Mail-Based Property and Financial Fraud Scheme** Cybersecurity analysts have identified a coordinated scam campaign utilizing two closely connected toll-free phone numbers: 800-202-6231 and 800-202-6321. These numbers have been reported together by consumers with a confidence level of 0.35, indicating a connected operation despite neither number generating formal FTC complaints to date. The slight variation in the final digits suggests a deliberate pattern designed to cr...
800-202-6231
Last reported Mar 27, 2026
- 8 community reports from users
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This scam campaign involves a coordinated network of seven phone numbers operating across multiple area codes, with strong connections to two debt collection companies that have generated significant consumer complaints. The central hub of this operation is 877-276-1770, which connects to five other phone numbers through same campaign relationships with 70% confidence levels. These connected numbers include 870-495-9932, 866-751-7467, 800-202-6231, 800-201-9390, and 601-202-0275, with an additio...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone9096341137
campaign co-memberphone4122148209
campaign co-memberRelated Domains
buysell.com
campaign co-memberdomaintekutool.com
campaign co-memberdomainwww.groupon.com
campaign co-memberdomainaol.com
campaign co-memberdomainn9gov.com
campaign co-memberdomainwww.federalreserve.gov.
campaign co-memberdomainwww.419scam.org
campaign co-memberdomainboardreader.com
campaign co-memberdomainconsultant.com
campaign co-memberdomainidentified.com
campaign co-memberdomainscoresense.com
campaign co-memberdomainweareelectricals.wordpress.com
campaign co-memberRelated Emails
cbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberemaildarkc0de@exploit.im
campaign co-memberemailhussain9710@hotmail.co.uk
campaign co-memberemailqxl.support.013@yandex.com
campaign co-memberemailhxpgogidohfauo-kdxxjgcqdtqkjmsv@loyqyarg-11131902.ca
campaign co-memberCommunity Reports
Letter with "Immediate response to this notice requested" and "final notice" written throughout. Has an attached check that says "Allocated Waiver" of $195 and says "This is not a check". Signed by William H. Keating. Phone number of 1-800-202-6231. [BBB Scam Type: Phishing] [Business: Unknown] [Location: TX, USA- 78250]
received a letter in the mail. states the letter is "about an important matter regarding property at - my address- secured by your current lender. We reserve the right to revoke allocated waiver after 7 days of receiving this notice. Please call IMMEDIATELY as this will be our FINAL ATTEMPT TO NOTIFY YOU: 1-800-202-6231 " followed by a fake check for 195.00 dollars signed by William H. Keating with the text "this is not a check" under the signature [BBB Scam Type: Phishing] [Business: doesnt say but William H. Keating Da] [Location: PA, USA- 15207]
We received a letter with no return address, asking us to call 1800-202-6231. The letter reads as follows: This letter is to inform you about an important matter regarding the property ***** secured by your current lender. We reserve the right to revoke allocated waiver after 7 days of receiving this notice. [BBB Scam Type: Phishing] [Business: Approval pending] [Location: NY, USA- 13491]
Received a letter in the mail. United States postage paid permit number 1935. No organization name given, return address. The letter said “This letter is to inform you about an important matter regarding the property at. (Our address was listed) secured by your current lender. We reserve the right to revoke allocated waiver after seven days of receiving this notice. Please call immediately as this will be our final attempt to notify you.: 1-800-202-6231.” The bottom of the letter is printed out to look exactly like a check for $195.00. I’m taking this document to the post office and asking them to report it and file it as male fraud, which is a federal crime here in the United States. [BBB Scam Type: Phishing] [Business: No name was listed anywhere on the mailing letter or envelope.] [Location: IL, USA- 60505]
I'm reporting the same scam as has been reported by others, a fake check signed William H. Keting and the following verbiage: IMMEDIATE RESPONSE TO THIS NOTICE REQUESTED FINAL NOTICE ATTENTION: My Name This letter is to inform you about an important matter regarding the property at XXXX XXXXXXX Ave NW# G1-XX secured by your current lender. We reserve the right to revoke allocated waiver after 7 days of receiving this notice. Please call IMMEDIATELY as this will be our FINAL ATTEMPT TO NOTIFY YOU: 1-800-202-6231. PHONE: 1-800-202-6231 Hours of Operation: Monday-Friday 9AM TO 5PM CST Record ID: EES52 etc. numbering MY NOTE: this was obviously nonsense and just a way to lure us into some scam [BBB Scam Type: Fake Invoice/Supplier Bill] [Business: Unknown] [Location: DC, USA- 20016]
This letter is to inform you about an important regarding the property at (****") secured by your current lender. We reserve the right to revoke allocated allocated waiver after 7 days of receiving this notice. Please call IMMEDIATELY as this will be our FINAL ATTEMPT TO NOTIFY YOU: 800-202-6231 [BBB Scam Type: Phishing] [Business: Fake check signed: William H. Keating] [Location: TX, USA- 78240]
received a letter in the mail. states the letter is "about an important matter regarding property at - my address- secured by your current lender. We reserve the right to revoke allocated waiver after 7 days of receiving this notice. Please call IMMEDIATELY as this will be our FINAL ATTEMPT TO NOTIFY YOU: 1-800-202-6231 " followed by a fake check for 195.00 dollars signed by William H. Keating with the text "this is not a check" under the signature [BBB Scam Type: Phishing] [Business: Home Warranty Fake Voucher Phishing and Identity Theft Scam] [Location: TX, USA- 75098]
Received a letter in the mail with a fake check for $195 attached. The Signature on the fake check was William H. Keating. The letter said ATTENTION: (name of addressee) This letter is to inform you about an important matter regarding the property at (our home address) secured by your current lender. We reserve the right to revoke allocated waiver after 7 days of receiving this notice. Please call IMMEDIATELY as this will be our FINAL ATTEMPT TO NOTIFY YOU: 1-800-202-6231 It also included a record ID: EER***CGB [BBB Scam Type: Other] [Business: William H. Keating] [Location: TN, USA- 37411]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.