I am not in agreement with only one source for all fake renewal notices. I ocassionally receive a notice NOT from my registrar that my name is lapsing in X months or XX days, and that I need to sign and pay them and they will renew. only problem, not my registrar. but that is different from the notice to corporates of the nature below, which I have seen as targeted at big corporates in particular. That could be primarily one or two sources, or cloning of the process used by one company, being cloned by someone else. :-)But if the compliance team is collecting the data, why can't they determine more clearly if it is a single source? From: john@crediblecontext.com To: chris@andalucia.com; bc-gnso@icann.org Subject: RE: [bc-gnso] Fake renewal notices Date: Thu, 15 Mar 2012 10:40:06 -0700 Hey, recall at the end of Mikey's presentation about the smoke/fire point of inflection and he said "one." I did not have the time to follow up. John BerardFounderCredible Context58 West Portal Avenue, #291San Francisco, CA 94127m: 415.845.4388 -------- Original Message -------- Subject: RE: [bc-gnso] Fake renewal notices From: "Chris Chaplow" <chris@andalucia.com> Date: Thu, March 15, 2012 10:31 am To: <john@crediblecontext.com>, <bc-gnso@icann.org> John, One source?? Lately the pattern has been quite constant ie an email from CN or HK similar to the one below. In the past I have known phone calls to business from the UK. One client asked me to return a call to the sales person on their behalf to ascertain if it was a valid concern. The sales person was very very well trained and the only ‘flaw’ in their sales argument that they were acting in the interest of my client the was insistence of the need to register for 10 years. best Chris Chaplow Managing Director Andalucia.com S.L. Avenida del Carmen 9 Ed. Puertosol, Puerto Deportivo 1ª Planta, Oficina 30 Estepona, 29680 Malaga, Spain Tel: + (34) 952 897 865 Fax: + (34) 952 897 874 E-mail: chris@andalucia.com Web: www.andalucia.com Information about Andalucia, Spain. De: john@crediblecontext.com [mailto:john@crediblecontext.com] Enviado el: jueves, 15 de marzo de 2012 17:41 Para: Chris Chaplow; bc-gnso@icann.org Asunto: RE: [bc-gnso] Fake renewal notices Chris, In his presentation yesterday to the GNSO Council, Mikey O'Connor, lead on the Fake Renewal Notices drafting team said they sought to determine if there were "smoke or fire and we found fire." But he also said the problem was one source. Is this your experience, too? Berard-------- Original Message -------- Subject: RE: [bc-gnso] Fake renewal notices From: "Chris Chaplow" <chris@andalucia.com> Date: Thu, March 15, 2012 3:17 am To: <bc-gnso@icann.org>John, Marin, Sarah Client contacted me today again about an URGENT communication they just receivedI have replaced the actual client’ domain name with ‘name’ as this is a public list. (It's very urgent, Please transfer this email to your CEO or appropriate person, Thanks) Dear CEO/Principal, This is Neil Dong---Senior Consultant of domain name registration and solution center in china. have something to confirm with you. We formally received an application on March 15th, 2012, one company which self-styled "Cakebake Investments co.,Ltd" were applying to register " name " as Network Brand and following domain names: " name.jp name.com.my name.sg name.com.sg name.kr name.co.kr name.ae name.vn name.com.vn" After our initial checking, we found that the brand name applied for registration are as same as your company’s name and brand, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we will finish the registration at once. If your company has no relationships with that company nor do not authorized, please reply to us within 7 workdays,if we can't get any information from yours over 7 workdays, we will unconditionally approve the application submitted by "Cakebake Investments co.,Ltd" . Thanks for your cooperation. Best Regards, Neil Dong (Mr.) Senior Consultant Manager Chris Chaplow Managing Director Andalucia.com S.L. Avenida del Carmen 9 Ed. Puertosol, Puerto Deportivo 1ª Planta, Oficina 30 Estepona, 29680 Malaga, Spain Tel: + (34) 952 897 865 Fax: + (34) 952 897 874 E-mail: chris@andalucia.com Web: www.andalucia.com Information about Andalucia, Spain.To: <john@xxxxxxxxxxxxxxxxxxx>Subject: RE: [bc-gnso] Fake renewal noticesFrom: martinsutton@xxxxxxxxDate: Wed, 14 Mar 2012 17:50:11 +0000John, My experience is similar, although I have not captured the metrics. I often receive (third-hand via tech/admin email addresses) slamming emails, rather than fake renewal notices, suggesting that domains are about to be registered which include my brand, offering me an opportunity to jump-in and claim it, along with a bunch of others. Kind regards, MartinMartin C SUTTON Group Risk Manager, Group Fraud Risk and Intelligence | HSBC HOLDINGS PLC HGHQGroup Security & Fraud Risk8 Canada Square,Canary Wharf,London,E14 5HQ,United Kingdom________________________________________________________________ Phone. +44 (0)20 7991 8074 / 7991 8074Mobile. +44 (0) 7774556680 Email. martinsutton@xxxxxxxx________________________________________________________________ From:<john@xxxxxxxxxxxxxxxxxxx>To:"Deutsch, Sarah B" <sarah.b.deutsch@xxxxxxxxxxx>, "'Chris Chaplow'" <chris@xxxxxxxxxxxxx>, "bc-gnso@xxxxxxxxx" <bc-gnso@xxxxxxxxx>Date:14/03/2012 17:40Subject:RE: [bc-gnso] Fake renewal noticesSent by:owner-bc-gnso@xxxxxxxxx Sarah, Any sense if the 25 a year you get is more, less or about the same as other similar-sized and positioned companies? Berard-------- Original Message --------Subject: RE: [bc-gnso] Fake renewal noticesFrom: "Deutsch, Sarah B" <sarah.b.deutsch@xxxxxxxxxxx>Date: Wed, March 14, 2012 8:36 amTo: "'Chris Chaplow'" <chris@xxxxxxxxxxxxx>, "bc-gnso@xxxxxxxxx"<bc-gnso@xxxxxxxxx> John, Zahid: The attached chart may be helpful for you as you discuss the fake renewal issue. This chart documents the many fake renewal/registration claims we have received inside Verizon. Most come from companies located in China or Hong Kong. We?ve sent a cease and desist letter to each, written to the Hong Kong Telecom Authority and the FTC, all to no avail. Sarah Sarah B. Deutsch Vice President & Associate General Counsel Verizon Communications Phone: 703-351-3044 Fax: 703-351-3670 From: owner-bc-gnso@xxxxxxxxx [mailto:owner-bc-gnso@xxxxxxxxx] On Behalf Of Chris ChaplowSent: Tuesday, March 13, 2012 6:01 PMTo: bc-gnso@xxxxxxxxxSubject: [bc-gnso] Fake renewal notices John and Zahid, I probably will not be at the Council tomorrow. Here is the issue that steve mentioned. I have website client who get fake renewal notices. Or phone calls. ?We have a client who wants to register name.cn and as you have name.com and as we are a responsible registrar (actually not accredited) we wanted to check with you first before accepting our client?s order. Do you want to register for 10 years of $$$ ?? I advise my clients it is a scam, but just to be on the safe side they usually instructs me to make a defensive registration and I do so for one year with another registrar. Best Chris ChaplowManaging DirectorAndalucia.com S.L.Avenida del Carmen 9Ed. Puertosol, Puerto Deportivo1ª Planta, Oficina 30Estepona, 29680Malaga, SpainTel: + (34) 952 897 865 Fax: + (34) 952 897 874E-mail: chris@xxxxxxxxxxxxxWeb: www.andalucia.comInformation about Andalucia, Spain. ************************************************************HSBC Holdings plcRegistered Office: 8 Canada Square, London E14 5HQ, United KingdomRegistered in England number 617987************************************************************ -----------------------------------------SAVE PAPER - THINK BEFORE YOU PRINT! This E-mail is confidential. It may also be legally privileged. If you are not the addressee youmay not copy, forward, disclose or use any part of it. If you havereceived this message in error, please delete it and all copiesfrom your system and notify the sender immediately by returnE-mail. Internet communications cannot be guaranteed to be timely secure,error or virus-free. The sender does not accept liability for anyerrors or omissions.References:RE: [bc-gnso] Fake renewal noticesFrom: john