This cybersecurity report analyzes a coordinated scam campaign involving United Group Inc. and three associated phone numbers that are targeting consumers through deceptive mailing operations and vehicle-related fraud schemes. The campaign centers around United Group Inc., a company operating in the vehicle loan or lease industry that has generated 75 complaints with the Consumer Financial Protection Bureau. This entity is directly connected to three phone numbers through reported relationships...
(888) 731-2187
Last reported Mar 25, 2026
- 3 community reports from users
Campaign Intelligence
This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...
This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...
**United Group Inc. Vehicle Warranty Scam Campaign** This scam campaign centers around United Group Inc., a company with 75 Consumer Financial Protection Bureau complaints in the vehicle loan or lease industry. The operation utilizes a coordinated network of three phone numbers: 833-330-5441, 877-695-1552, and 888-731-2187. These numbers are connected through same campaign relationships with confidence levels of 0.70, indicating they are part of a unified fraudulent scheme. Each phone number ha...
This cluster centers on 1486 connected domains tagged as None, keylogger. 5 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1364 phone numbers (3124141737, 3163966869, 8553892999) with 17909 FTC complaints; 170 companies (EQUIFAX, INC., TRANSUNION INTERMEDIATE HOLDINGS, INC., BANK OF AMERICA, NATIONAL ASSOCIATION) with 8747332 CFPB complaints; 187 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grup...
Details
Linked Company Activity
Connected Entities
Linked Companies
Related Phone Numbers
Community Reports
This letter is to inform you about an important matter regarding property at (our address) secured by your current lender whic is United States of America (not our lender). We reserve the right ot revoke the allocated waiver after 7 days of receiving this notice. Please call immediately as this will be our final attempt to notify you. 888-731-2187 Attached was what appeared to be a check for $199.00. Below that in small print it states, "This is not a check". [BBB Scam Type: Counterfeit Product] [Business: Tax Deed Legl] [Location: LA, USA- 71351]
The phishing scam was careful not to implicate themselves and attempts to scare victims into calling their number listed in the letter. The 3-sided, perforated UNITED STATES MAIL had this information on the outside: U.S. POSTAGE PAID PERMIT NO. 1535 PRESORTED STANDARD MAILED FROM ZIP CODE 33431 The letter stated: This letter is to inform you about an important matter regarding the property VICTIM's ADDRESS REDACTED secured by your current lender which is REDACTED. We reserve the right to revoke allocated waiver after seven days of receiving this notice. PLEASE CALL IMMEDIATELY AS THIS WILL BE OUR FINAL ATTEMPT TO NOTIFY YOU 888-731-2187. [BBB Scam Type: Phishing] [Business: Access Fcu] [Location: TN, USA- 37066]
Received a letter w/ $199 "Allocated Waiver." Stated they were secured by my current Lender: Nvr Mtg Fin Inc. Regarding my property. (I have no mortgage or lender of any kind) Stated FINAL ATTEMPT TO NOTIFY and to call immediately at 888-731-2187. I Did NOT. [BBB Scam Type: Other] [Business: Allocated Waiver] [Location: OH, USA- 44310]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
Proton Pass — Unique passwords for every account
After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.