Counterfeit National United cashier's checks

The above-named bank has reported that at least three variations of counterfeit cashier’s checks using the bank’s routing number of 111904419 are being presented for payment nationwide in connection with various online employment opportunity scams involving mystery shopping and automobile advertising wraps.

The counterfeit checks resemble the bank’s authentic items but may be identified by the following traits:

• Variation No. 1
  • The check is light blue with a marbled background.
  • The Notice to Customer section in the upper left-hand corner is void of any punctuation.
  • The following security statement appears in a dark blue top border: “THIS DOCUMENT HAS A COLORED BACKGROUND AND MICROPRINTING. THE REVERSE SIDE INCLUDES AN ARTIFICIAL WATERMARK.”
• Variation No. 2
  • The check is light blue with a thin dark blue border.
  • The Notice to Customer section in the upper left-hand corner is void of any punctuation.
  • The following security statement appears in the top border: “WARNING: THIS DOCUMENT HAS SECURITY FEATURES IN THE PAPER.”
  • A padlock icon and security statement are located within the right border.
• Variation No. 3
  • The Notice to Customer section in the upper left-hand corner is void of any punctuation.
  • The following security statement appears in the top border: “FOR SECURITY PURPOSES, THE FACE OF THIS DOCUMENT CONTAINS A COLORED BACKGROUND AND MICROPRINTING IN THE BORDER.”
  • The following security statement appears in the bottom border between padlock icons: “SECURITY FEATURES INCLUDED. DETAILS ON BACK.”

Checks presented to date have been made payable in amounts ranging from $750.99 to $4,108.11, with the majority bearing amounts under $3,000.

Known scams include the following:

• Secret Shopper Money Transfer Service
  There are two known letters circulating in regard to this scam. Potential victims of the mystery shopping scam have received correspondence accompanying the check, which contains the names of nationally known retail stores and money transfer services within the letterhead. The correspondence instructs the potential victims to confirm receipt of the packet by sending an email to either [task@retailadminresearch.com] or [msconductagent@gmail.com] as well as a text message to either (951) 468-5394 or (424) 444-3734. The recipient is further instructed to deposit the funds at his or her financial institution and to text the perpetrator at the above number to confirm the deposit. The letter informs the recipient to retain $400 for commission and $100 for gas/transportation. The majority of the funds are to be used to conduct three wire transfers to the perpetrators at a well-known retail store for the purported purpose of the victim surveying the services of the money transfer center located within the retail store. The following statement is contained within the letter: “Some of the security questions which can trip you include, but not limited to the following: If or when asked if you are a mystery shopper, answer NO. If or when asked if you know the recipients in person, answer YES.” The correspondence contains a point-of-contact name of either Carl Rajan or John Fisher of Corporate Research International.
• Secret Shopper Gift Card
  Potential victims of the gift card scam have received correspondence accompanying the counterfeit check, which contains the name of a nationally known retail store and the name of a well-known mobile device management and entertainment application. The correspondence instructs the potential victims to confirm receipt of the packet by sending a text message to (848) 667-7560. The recipient is further instructed to deposit the funds at his or her financial institution and to confirm the deposit by sending a copy of the deposit slip to the perpetrator. The letter instructs the recipient to retain $500 of the deposited funds for commission. The majority of the funds are to be used in three separate transactions purchasing $100- and $50-denomination gift cards at a well-known retail store for the purported purpose of the victim surveying the conduct of the sales representatives. Following the purchase of the cards, the potential victim is told to scratch the cards to reveal the card numbers and to send photos of each card to the perpetrator. The correspondence contains a company name of Corporate Research International and an email address of [assesment-results@outlook.com].
• Automobile Wrap Advertising
  There are two known emails circulating in regard to this scam. Each potential victim of the car wrap scam has received email correspondence confirming that he or she has been selected to advertise one of two nationally known beverage companies on his or her vehicle and that the counterfeit check has been mailed out to him or her. The potential victim is told to deposit the check into his or her bank account and send the perpetrator a copy of the deposit slip. The letter instructs the recipient to retain a small portion of the funds for his or her service providing automobile wrap advertising for the company. The victim is instructed to deposit the remaining balance into the perpetrator’s bank account for the purported purpose of paying decal specialists who will be in contact with details on performing the automobile wrap. Contact information contained within these emails may include the name of Derek Brown with an email address of Blessed Son [realblessing348@gmail.com] and a text-only telephone number of (254) 244-2376, or Kevin Bill with email addresses of [billxnavig23@googlemail.com] or [info.shopperinc.hrdept.2017@gmail.com] and telephone numbers of (510) 254-0383 or (510) 542-9265.