This scam campaign centers around United Group Inc., a vehicle loan or lease company with 75 Consumer Financial Protection Bureau (CFPB) complaints, operating in coordination with three connected phone numbers: 844-974-0654, 223-284-7777, and 833-330-5441. Despite having no Federal Trade Commission (FTC) complaints recorded individually, these phone numbers demonstrate strong operational connections, with same-campaign confidence levels of 0.70 between all three numbers. The company shows partic...
833-330-5441
Last reported Apr 16, 2026
- 7 community reports from users
Campaign Intelligence
This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This cybersecurity report analyzes a coordinated scam campaign involving United Group Inc. and three associated phone numbers that are targeting consumers through deceptive mailing operations and vehicle-related fraud schemes. The campaign centers around United Group Inc., a company operating in the vehicle loan or lease industry that has generated 75 complaints with the Consumer Financial Protection Bureau. This entity is directly connected to three phone numbers through reported relationships...
**United Group Inc. Vehicle Warranty Scam Campaign** This scam campaign centers around United Group Inc., a company with 75 Consumer Financial Protection Bureau complaints in the vehicle loan or lease industry. The operation utilizes a coordinated network of three phone numbers: 833-330-5441, 877-695-1552, and 888-731-2187. These numbers are connected through same campaign relationships with confidence levels of 0.70, indicating they are part of a unified fraudulent scheme. Each phone number ha...
This scam campaign involves a coordinated network of five phone numbers operating under the guise of legal document delivery services, with connections to two companies that have generated significant consumer complaints. The central phone number 8776951552 serves as a hub, maintaining same_campaign relationships with confidence levels of 0.70 to four other numbers: 8333305441, 6148052524, 8889955185, and 3148048519. Despite these coordinated operations, none of the five phone numbers have gener...
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
Theres a qr code to scam RESPONSE TO THIS NOTICE REQUESTED ATTENTION: Please call 1-833-330-5441 with VIN and current mileage before April 2 Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchased recently. You are receiving this notice because a limited amount of time has been allotted to the expiration of your vehicle's factory warranty coverage. By neglecting to replace your coverage you will be at risk of being financially liable for any and all repairs after your factory warranty expires. However, you still may have time left to activate coverage on this vehicle before it's too late. Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you about your additional mechanical repair coverage. We reserve the right to revoke your eligibility for service coverage if you do not meet our criteria. Call within 5 days to ensure eligibility. Sincerely, Paul Friedrick Paul Friedrick Program Coordinator United Automotive Services Operating Hours: Monday - Friday Tam-7pa CST and Satandey 9 am, -4 pm. CST To cuase genscreened offers call 888-567-6688. See PRESCREEN & OPT-OUT NOTICEnvers [BBB Scam Type: Phishing] [Business: Paul Friedrick Program Coordinator United Automotive Services] [Location: KY, USA - 41042]
Received a letter via postal mail from United Automotive Services on November 17, 2025. This came a couple months after I purchased my 2024 Hyundai. Letter reads as follows: ATTENTION: "My name" Please call 1-833-330-5441 with VIN and current mileage before November 19. Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchased recently. You are receiving this notice because a limited amount of time has been allotted to the expiration of your vehicle's factory warranty coverage. By neglecting to replace your coverage you will be at risk of being financially liable for any and all repairs after your factory warranty expires. However, you still may have time left to activate coverage on this vehicle before it's too late. Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you about your additional mechanical repair coverage. We reserve the right to revoke your eligibility for service coverage if you do not meet our criteria. Call within 5 days to ensure eligibility. Sincerely, Paul Friedrick Program Coordinator United Automotive Services [BBB Scam Type: Phishing] [Business: United Automotive Services Date Repo] [Location: UT, USA - 84058]
Attention: Please call 1-833-330-5441 with VIN and current mileage before January 29th. Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchased recently. You are receiving this notice because a limited amount of time has been allotted to the expiration of your vehicle's factory warranty coverage. By neglecting to replace your coverage you will be at risk of being financially liable to any and all repairs after your factory warranty expires. However, you still may have time left to activate coverage on this vehicle before it's too late. Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you about your additional mechanical repair coverage. We reserve the right to revoke your eligibility for service coverage if you do not meet our criteria. Call within 5 days to ensure eligibility. [BBB Scam Type: Other] [Business: UAS - United Automotive Services Dat] [Location: UT, USA- 84644]
Please call 1-833-330-5441 with VIN and current mileage before March 25. [Oh so we're starting bossy, ok.] Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchased recently. [No ****, who are you again?... They don't even know what car I bought lmao] You are receiving this notice because a limited amount of time has been allotted to the expiration of your vehicle's factory warranty coverage. [As is the standard with all new vehicles, ~3 years] By neglecting to replace your coverage you will be at risk of being financially liable for any and all repairs after your factory warranty expires. [Well that's just the reality of owning a vehicle and maintaining it. Also why we have car insurance, NEXT.] However, you still may have time left to activate coverage on this vehicle before it's too late. [Oh my savior! Not. This is fear mongering] Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you [Girl, I HOPE this is the last time you attempt to contact me or we're gonna have a problem] about your additional mechanical repair coverage. [or as Gen Z has meme'd: *In a whisper voice* I'm just gonna scooch in right here if you don't mind. We've been trying to contact you regarding your car's extended warranty] We reserve the right to revoke your eligibility for service coverage if you do not meet our criteria. Call within 5 days to ensure eligibility. Sincerely, Paul Friedrick Program Coordinator United Automotive Services [BBB Scam Type: Phishing] [Business: USA-United Automotive Services Date] [Location: NJ, USA- 08087]
Bought a new car in Jan. Got a letter in late Feb advising "Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchaed recently. Please call 1-833-330-5441 with VIN and current mileage before Feb 27th." Googling United Automotive Services reveals a number of people getting this same letter from "Paul Friedrick". [BBB Scam Type: Phishing] [Business: United Auto Services] [Location: OK, USA- 74011]
Received a letter via postal mail from United Automotive Services on February 25, 2026. This comes a month after I purchased my 2023 Hyundai *****. Letter reads as follows: ATTENTION: "My name" Please call 1-833-330-5441 with VIN and current mileage before March 4. Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchased recently. You are receiving this notice because a limited amount of time has been allotted to the expiration of your vehicle's factory warranty coverage. By neglecting to replace your coverage you will be at risk of being financially liable for any and all repairs after your factory warranty expires. However, you still may have time left to activate coverage on this vehicle before it's too late. Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you about your additional mechanical repair coverage. We reserve the right to revoke your eligibility for service coverage if you do not meet our criteria. Call within 5 days to ensure eligibility. Sincerely, Paulina Thompson Program Coordinator United Automotive Services [BBB Scam Type: Phishing] [Business: United Automotive Services Date Repo] [Location: FL, USA- 33625]
Received the following letter: Please call 1-833-330-5441 with VIN and current mileage before March 16. Our records indicate that you have not contacted us regarding mechanical coverage on the vehicle you purchased recently. You are receiving this notice because a limited amount of time has been allotted to the expiration of your vehicle's factory warranty coverage. By neglecting to replace your coverage you will be at risk of being financially liable for any and all repairs after your factory warranty expires. However, you still may have time left to activate coverage on this vehicle before it's too late. Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you about your additional mechanical repair coverage. We reserve the right to revoke your eligibility for service coverage if you do not meet our criteria. Call within 5 days to ensure eligibility. Sincerely, Paul Friedrick Program Coordinator United Automotive Services [BBB Scam Type: Phishing] [Business: United Automotive Services Date Repo] [Location: CT, USA- 06824]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.