Real banks do not underwrite fantasy deals with a JPG of a cashier’s check and a PDF that says “Ready, Willing and Able.” Fraud desks know that. So they stack three props that look like the private-banking ladder: identity of the firm → bank “certification” → funding “RWA” → instrument that looks like money (cashier’s check). Each layer buys one more day of belief.
1. What the pack contains
The desk archive holds the set as three separate alerts (June 2022 materials), all stamped FAKE in the original captions:
- JPMorgan Chase–style “Certification” — institutional trust prop
- RWA letter — “Ready, Willing and Able” (see also CF-023)
- Cashier’s check image — visual of “already paid / already secured funds”
Linked entity labels in those posts: Alpha Omega Holdings Global Co Ltd and person name Zulkefle Bin Muhamad.
2. Exhibits (watermarked)
Images below are reduced and overprinted FAKE · SCAM WIRE EXHIBIT · NOT A BANK DOCUMENT. Do not treat them as authentic. Do not strip watermarks. Do not use them in any transaction.
3. Why this pack works on targets
- Brand theft — JPMorgan logos lower the victim’s skepticism in seconds
- RWA language — sounds like private banking, means nothing without bank channel confirmation
- Cashier’s check visuals — people treat checks as “already money”
- Stacking — three documents create a false sense of process and due diligence
Related theatre: CF-026 bank drafts / letterhead theft · CF-001 instrument playbook · CF-002 advance-fee traps.
4. Same archive, same method: bank confirmation letter (extra exhibit)
The same week’s channel traffic also flags a Deutsche Bank–style “Bank Confirmation Letter” labeled with CEDRUS GMBH — different entity, same costume logic: steal a bank’s face, invent corporate readiness.
5. Desk checklist
- Call the named bank on an official number — ask if any RWA / certification / check exists for these parties
- Refuse fees “to release,” “authenticate,” or “clear” paper you have not verified bank-side
- Treat cashier’s check images as worthless until cleared by your own bank
- Preserve full original files, hashes, chat context for a tip file
6. How Scam Wire publishes fake SWIFT / bank PDFs
Yes — we can and will publish forgeries as exhibits, under strict rules:
- Always labeled FAKE in caption and on-image watermark
- Educational / investigative purpose only — red flags, defects, scheme anatomy
- No clean originals for public download when the file could be re-used as a prop
- Prefer images with banner watermark; PDFs only with permanent overlay + “EXHIBIT” metadata when needed
- Source credit — channel / tip desk archive noted
- We do not invent bank messages or create new forgeries to “look real”
That policy lets the desk show what victims actually receive — including MT103/MT799-style PDFs from the same public fraud-watch archive — without feeding fresh clean templates into the underground.
Source: the Scam Wire exhibit archive. Related files on Scam Wire: CF-023 RWA · CF-024 MT799 · CF-006 MT103 packs · CF-029 LC issuance theatre.
Standards: Document-first reporting from public fraud-watch materials and channel archives. Not legal advice. Naming in a case file follows published alerts and document labels — it is not a criminal conviction. Tips with original packs: tip desk · all case files.