NET RFQ: Request for Quote Scammers Casting Wide Net to Steal Real Goods

July 23, 2025, 9:34 a.m.

Description

This intelligence analysis examines a widespread Request for Quote (RFQ) scam that exploits Net financing options to steal high-value electronics and goods. The scammers pose as procurement agents for legitimate companies, using stolen information and lookalike domains to appear credible. They request quotes for specific items and inquire about Net 15/30/45-day financing. Once credit is approved, they provide shipping addresses, often using freight forwarding services or residential addresses. The scammers utilize a network of shipping services, warehouses, and money mules to facilitate their operations. Key characteristics of the scam include urgent financing requests, suspicious delivery addresses, and the use of free email accounts. Mitigation efforts included domain takedowns and intercepting fraudulent shipments.

Date

  • Created: July 23, 2025, 8:02 a.m.
  • Published: July 23, 2025, 8:02 a.m.
  • Modified: July 23, 2025, 9:34 a.m.

Indicators

  • willmengconstructions.com
  • weikart-ch.com
  • vseaviations-inc.com
  • volusiagov.org
  • volusiacountygov.org
  • uk-novartis.com
  • twc-texas-gov.us
  • turtlleinc.com
  • tudisinc.com
  • thekrogerc.com
  • thedotfunds.org
  • superiorcranesinc.com
  • smithppi.net
  • sheppardtruckings.com
  • quad-graphics.org
  • sjdieselservices.com
  • portable-air1.net
  • ourmexicanwall.com
  • patmurphyelectrics.com
  • omexom-nz.com
  • omegaengineering-inc.com
  • nterceptroofings.com
  • novartispharmcorp.com
  • novartispharmaceuticalscorp.com
  • novartisphamcorp.com
  • ngbaileys.com
  • mgnetekinc.com
  • mtindgovsg.com
  • mexicanbarrier.com
  • marrten.net
  • magnetekincs.com
  • magnetekhm.com
  • magnetekgroup.com
  • magnetek-inc.com
  • lakeland-gov.net
  • lewiisupply.com
  • louisvileedu.net
  • labchem-wako-fujifilm.com
  • keyeances.com
  • konannmedical.com
  • johnsoncontr0ls.com
  • interceptroofiing.com
  • interceptrooofing.com
  • innovativemedicinejnj.com
  • icon-consturction.com
  • iciconstructionincs.com
  • honplumbing.com
  • hearingcomponent.com
  • hbfullercompany.net
  • hardlnge.com
  • hard1nge.com
  • hammondelectrics.com
  • gwelecco.com
  • gskpharma.co.uk
  • gsk-ch.com
  • foxcorporations.net
  • fossmaritimes.com
  • faureciausa.com
  • enerveos.com
  • energyelectricneinc.com
  • elllisdoninc.com
  • dvnenergycorp.org
  • dvnenergycorp.net
  • dvnemail.com
  • dropsausas.com
  • dgicomunications.com
  • dgicomunication.com
  • delcoelectricsinc.com
  • denttoni.com
  • cummingselecs.com
  • creechlogistic.com
  • collinsmns.com
  • clemsons-edu-schools.com
  • clemsons-edu-school.com
  • cleanwatersteams.com
  • cleanswatersteam.com
  • claycorpe.com
  • cityofchicago-gov.org
  • citicgroups-hk.com
  • beauchampcos.com
  • bcciconsts.com
  • bbtruckings.net
  • azdamiaan-be.com
  • atlanticsdda.com
  • americaninstituteresearch.org
  • advances-electricsinc.com
  • aceelectricalsinc.com
  • abelectriceincs.com
  • abecelectrics.com
  • abecelectrical.com
  • abecelectric.xyz
  • abecelectric.net
  • abecelectric.biz
  • abec-electricinc.com

Attack Patterns

Additional Informations

  • Retail
  • Technology
  • Healthcare
  • Education
  • Government
  • Manufacturing
  • Nigeria
  • Ghana
  • United States of America