Front picture: Pixabay Example
In recent months, many businesses, particularly small and medium-sized publishers, exporters, and companies with publicly available email addresses, have reported receiving a sudden flood of unsolicited emails claiming to represent large purchase orders. These messages often appear professional at first glance but follow a well-known pattern commonly associated with advance fee fraud.
A typical example begins with an apology that previous attempts to reach the recipient via email failed. The sender introduces himself as a cargo agent or logistics coordinator, frequently using names such as Omar Saad and claiming affiliation with stations like Menzies-Entebbe.
The message asks whether a specific company email address remains active and requests an alternative contact method, most commonly a WhatsApp number. An attachment labelled “new purchase order” is usually included, along with requests for several documents: a separate invoice, a sales contract with the correct HS codes and detailed item descriptions, bank payment details, and a comprehensive quotation in Excel format.
The requested quotation often includes item images, barcodes, FOB USD prices (with emphasis on the “lowest and best” rates), measurements, carton packing details, GCC certificates for all products, and any other relevant export documentation. The sender stresses the need for a quick deposit and underlines that bank details must exactly match the company name on the proforma invoice to avoid rejection by their bank. Additional notes mention internal procedures, such as quality control checks before shipment, which are designed to sound legitimate and procedural. These communications represent a classic form of advance fee scam adapted to the international trade and export sector. The initial goal is not to complete a genuine transaction but to move the conversation away from email to WhatsApp or other direct messaging platforms, where scammers can more easily build trust and exert pressure.
Once contact is established, the fraudsters typically send increasingly detailed but fake documentation. They may promise a substantial order while gradually introducing “complications” – such as customs fees, certification issues, shipping deposits, or agent charges – that require the seller to pay money upfront. In some variations, scammers send forged proof of payment and then request refunds or additional transfers when the “funds” fail to appear due to alleged bank restrictions.
Several red flags consistently appear in these schemes. The contact is unsolicited and arrives in high volume. The sender claims to work for a recognizable logistics company or airport station but provides little verifiable information. Requests for sensitive details, especially full bank information and extensive product documentation, come very early in the exchange. There is often an emphasis on speed and urgency, combined with assurances that a deposit will follow shortly. Legitimate international buyers rarely demand such comprehensive documentation, including GCC certificates and detailed Excel files with images and barcodes, before any verification of the seller’s credibility or the establishment of proper trade terms.
Businesses in the publishing and media sector appear to be frequent targets, possibly because company email addresses are publicly listed on websites or because scammers assume these firms regularly handle physical goods and export documentation. The use of real-sounding but misused company names, such as references to established aviation or cargo providers, serves to lend false credibility.
However, genuine cargo agents or large buyers do not initiate high-value orders through cold emails that immediately pivot to WhatsApp while requesting advance bank details and complex certificates.
The consequences of engaging with such scams can be significant. Victims may lose time, disclose sensitive company and banking information, or, in the worst cases, transfer funds for nonexistent “fees” or “taxes.” Even without direct financial loss, responding can lead to the email address being flagged as active and added to broader scam databases for further targeting.
Experts recommend several protective measures. Unsolicited purchase orders that request immediate WhatsApp contact or extensive documentation before any formal verification should be treated with caution. No legitimate buyer expects a seller to provide full bank details and certificates for a supposed large order without proper due diligence, contracts, or established business relationships. Companies should verify any potential partner independently through official channels rather than relying solely on information provided in the initial email. Attachments from unknown senders should be handled carefully and scanned for malware.
Awareness remains one of the most effective defences. By recognising the recurring patterns – the sudden large order, the push toward informal messaging apps, the early demand for payment details, and the overly detailed documentation requests – businesses can avoid becoming victims. In international trade, legitimate transactions are built on verified relationships, formal contracts, and secure payment methods such as letters of credit, not on urgent emails from unfamiliar cargo agents promising quick deposits.
Staying vigilant and sharing information about these evolving tactics helps protect not only individual companies but the wider business community from these persistent fraudulent schemes.
Here is the original mail:
Hello,
My colleague has tried to reach you regarding this purchase order, but the emails didn’t go through. Is your email address still active? Could you also provide your WhatsApp as an alternative way to contact you?
Please find attached the new purchase order. We need to receive a separate invoice and sales contract for this order with the correct HS codes and item descriptions. Please also include your payment details, as we want to make a deposit as soon as possible.
Important: The bank details must match the company name on the proforma invoice; otherwise, our bank will reject the deposit and balance payment application.
Note: Due to our company procedures, every order must be checked and approved by our Quality Control Department before shipment.
Could you also send us a quotation in Excel format that includes the following:
Item images
Item barcodes
Item FOB USD prices (lowest and best price)
Item measurements
Carton packing details
GCC certificates for all products to be shipped
And any other relevant details.
Kind regards,
Cargo Agent
Menzies-Entebbe Station
Mobile: +1 761 8906543
