TheGlobalPayBack.com

Here is another scam recovery agent from Tel Aviv.

But who are they? They appear to be the same company (at least they share the premises and phone number) as: scamsrecovery.com and Cyber-Shields.com

According to their website:

TheGlobalPayback.com is owned by Rozenti Consulting and Media LTD registration number 516011665

Well that is not a UK LTD company number, too many digits for a number starting with a five.

Israel though, was re-founded upon British Free Palestine and they inherited the LTD term. The name Rozenti Consulting and Media LTD does check out with that registration number:

ROZENTI CONSULTING AND MEDIA LTD | Israel Company Reports - Search Israeli Companies (israelbizreg.com)

ROZENTI CONSULTING AND MEDIA LTD (datacheck.co.il)

These are the only mention of the company on the entire web though - they have no website and there are many legal advisors on justanswer.com citing them as a fraud.

This is definitely a red flag.

Interestingly, GlobalPayBack.com and TheGlobalPayBack.com appear to be just ten minutes drive apart:

There is no automated fake chat thankfully, harvesting contact detail for unscrupulous reasons. That is a good sign. But the new website does just appear to be a WordPress site with a contact form which is exactly what the scammers themselves use, this is a big red flag!

The blog certainly seems up-to-date now, with various bits of advice about phishing and website identification, which is all good advice for phishing, but phishing is not actually a problem that a recovery company could help with is it? How would they even identify fraud based on passwords being compromised? How could they recover legitimately from phishing fraud? What process could they follow?

They have their own terms and conditions page too, which is encouraging, but it is a fairly unedifying set of T&Cs. It cannot be in respect of any particular country of course, as they claim to be able to recover anything. 

Well, just looking at the site, it is a fairly poorly chosen domain name - TheGlobalPayBack.com

It doesn't tell you who they are, where they are, or what they recover, and the cynical amongst us may suspect that this is entirely by design.

It also sounds like an environmental action group, which is hardly the image they are going for.

There is another red flag here, that this website appears to be a rebrand from an earlier website here:

1ST Option – Debt Recovery Services (firstoptiondebtrecovery.com)

Let's have a look at the blog and dates - there are none! They do say they have recovered $9,850,000 just like their counterparts.

Same address: Habarzel 11, Tel-Aviv, Israel

Same company: Rozenti Consulting and Media Ltd

Same T&Cs

Same fake testimonials with actors

Definitely appears the same:

The Global Payback -Recover Your Lost Funds!

 

So which one is a rebranding of which?

Either way a rebranding is a sign that they are trying to hide their past - huge red flag!!! 

All of the telephone numbers appear to be 0203 UK forwards, feigning a UK address even though they give an Israeli one. This could just be that they are picking up a UK IP address and are giving us the best number to call.

Down at the bottom, in fine print, we see:

Disclaimer: The Global Payback provides free consultations. Chargeback and other fund recovery programs contracted thereafter are subject to retainers, fees and/or commissions depending on the individual case history and the type of service selected. The Global Payback does not offer any financial investments or advice. For residents in the United Kingdom only, The Global Payback does not assist consumers with complaints concerning mis-sold investment products which have been purchased from firms regulated by the UK Prudential Regulation Authority (PRA) and/or the UK Financial Conduct Authority (FCA), such as contracts for differences

Now this is something that they have had to specify in order to trade presumably. At no point do they claim to be regulated by anyone in the UK.

They do have testimonials that are obviously actors, such as the below.

This is cause for serious concern - it means that these people may well be the origin of all of the Bitcoin Auto Trader scams as this kind of tactic is synonymous with companies of that sort. No respectable recovery company would even consider this. This is another huge red flag!

Let's see if we can track down who they are by other means:

A theglobalpayback.com 152.160.248.97
AHOSTING (AS54163)

 

Their IP has the following listed:

NetRange: 152.160.0.0 - 152.160.255.255
CIDR: 152.160.0.0/16
NetName: 2020
NetHandle: NET-152-160-0-0-1
Parent: NET152 (NET-152-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS12129
Organization: 2020 Communications LLC (COMMU-184-Z)
RegDate: 1993-06-18
Updated: 2012-04-07
Ref: https://rdap.arin.net/registry/ip/152.160.0.0 


OrgName: 2020 Communications LLC
OrgId: COMMU-184-Z
Address: 24700 Northwestern Hwy. STE 700
City: Southfield
StateProv: MI
PostalCode: 48075
Country: US
RegDate: 2009-06-02
Updated: 2017-01-28
Comment: Please contact abuse@123.net or 866.460.3503
Ref: https://rdap.arin.net/registry/entity/COMMU-184-Z 


OrgAbuseHandle: JNO80-ARIN
OrgAbuseName: Nowlan, James
OrgAbusePhone: +1-248-228-8200
OrgAbuseEmail: jnowlan@123.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/JNO80-ARIN 

OrgAbuseHandle: RD1464-ARIN
OrgAbuseName: Duda, Ryan
OrgAbusePhone: +1-248-228-8200
OrgAbuseEmail: rpd@123.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/RD1464-ARIN 

So they are hosted in Michigan.

Where as GlobalPayBack.com: 66.96.132.47 2020-02-18 2021-11-18 2 years

Domain Name: globalpayback.com
Registry Domain ID: 2443769864_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2020-01-14T09:17:16Z
Creation Date: 2019-10-15T03:27:59Z
Registrar Registration Expiration Date: 2022-10-15T03:27:59Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Registrant Organization:
Registrant State/Province: Israel
Registrant Country: IL
Registrant Email: Select Contact Domain Holder link at https://www.godaddy.com/whois/results.aspx?domain=globalpayback.com
Tech Email: Select Contact Domain Holder link at https://www.godaddy.com/whois/results.aspx?domain=globalpayback.com
Admin Email: Select Contact Domain Holder link at https://www.godaddy.com/whois/results.aspx?domain=globalpayback.com
Name Server: NS1.IPOWER.COM
Name Server: NS2.IPOWER.COM
DNSSEC: unsigned

 

Nothing sinister about those, in fact that TheGlobalPayBack.com are hosted in the US at all is a good sign. At least they aren't masked by Cloudflare. GlobalPayBack.com are hosted with GoDaddy and do explain that they are in Israel too.

The sparsity of the processes mentioned though are yet another serious red flag as they tell you nothing apart from the fact that they phone you and tell you if they can recover or not.

The feeling here is that this company will probably not be able to recover anything you cannot recover yourself with a bit of pressure on your bank, perhaps from a local solicitor.

There are too many loose ends on this website and not enough transparency of this company as a whole.

We do not recommend these companies for recoveries.

The Global Payback is definitely the recovery company that most people enquire about. They have set-up a new website and are now claiming to have recovered over $12m on behalf of people.

They are using Quora to advertise themselves which seems to be a popular way of doing things with these recovery companies. They have the Quora plug-in installed on their WordPress site.

They also have a new website:

The focus here appears to be on older people now. They are certainly offering a lot of services for all sorts of meaningless terms: fund recovery, wire fraud, investment scams, forex scams, romance scams, wealth recovery, so let's see if their blog has improved.

 But the website does show all sorts of worrying traits which indicate scammers.

The UK phone number has changed again which is a sign that they are continually forced to hide their identity, now it is +44 (204) 525-4740 instead of the 0203 number they used before. This number is still not a real geographic number so they do not have any people in the UK< just a number that diverts to Israel.

They claim that they perform cyber forensic services:

This is a contradiction to the text here, that they send out forms and letters, and if they are based in Israel, their legal qualifications, if they have any, have no bearing on Australian, Canadian, US or UK law. There is no legal case being built here, they are just making a claim to your bank that this was a fraud, which you can do yourself easily.