The FBI is warning timeshare homeowners to be cautious of a prevalent telemarketing rip-off involving a violent Mexican drug cartel that tries to trick aged individuals into believing somebody needs to purchase their property. That is the story of a pair who lately misplaced greater than $50,000 to an ongoing timeshare rip-off that spans at the least two dozen phony escrow, title and realty companies.

One of many phony actual property corporations making an attempt to rip-off aged individuals out of cash over faux affords to purchase their timeshares.
One night in late 2022, somebody phoned Mr. & Mrs. Dimitruk, a retired couple from Ontario, Canada and requested whether or not they’d ever thought-about promoting their timeshare in Florida. The particular person on the cellphone referenced their timeshare deal with and stated that they had an purchaser in Mexico. Would they presumably be desirous about promoting it?
The Dimitruks had bought the timeshare years in the past, but it surely wasn’t absolutely paid off — they nonetheless owed roughly $5,000 earlier than they might legally promote it. That wouldn’t be a difficulty for this purchaser, the person on the cellphone assured them.
With just a few days, their contact at a escrow firm in New York referred to as ecurrencyescrow[.]llc faxed them varieties to fill out and ship again to start out the method of promoting their timeshare to the potential purchaser, who had supplied an quantity that was above what the property was doubtless value.
After sure varieties had been signed and faxed, the Dimitruks had been requested to ship a small wire switch of greater than $3,000 to deal with “administrative” and “processing” charges, supposedly in order that the sale wouldn’t be held up by any bureaucratic crimson tape down in Mexico.
These doc exchanges went on for nearly a 12 months, throughout which era the actual property brokers made extra monetary calls for, resembling tax funds on the sale, and varied administrative charges. Ms. Dimitruk even despatched them a $5,000 wire to repay her remaining steadiness on the timeshare they thought they had been promoting.
In a cellphone interview with KrebsOnSecurity, Mr. Dimitruk stated they misplaced over $50,000.
“They stored calling me after that saying, ‘Hey your cash is ready for you right here’,” stated William Dimitruk, a 73-year-old retired long-haul truck driver. “They stated ‘We’re going to get in hassle if the cash isn’t returned to you,’ and gave me a toll-free quantity to name them at.”
Within the final name he had with the scammers, the person on the opposite finish of the road confessed that some dangerous individuals had labored for them beforehand, however that these staff had been fired.
“Close to the top of the decision he stated, ‘You’ve been coping with some dangerous individuals and we fired all these dangerous guys,’” Dimitruk recalled. “In order that they had been like, yeah it’s all good. You may go forward and pay us extra and we’ll ship you your cash.”
Based on the FBI, there are certainly some very dangerous individuals behind these scams. The FBI warns the timeshare fraud schemes have been linked to the Jalisco New Era drug cartel in Mexico.
In July 2024, the FBI and the Treasury Division’s Monetary Crimes Enforcement Community (FinCEN) warned the Jalisco cartel is working boiler room-like name facilities that concentrate on aged individuals who personal timeshares:
“Mexico-based [transnational criminal organizations] such because the Jalisco New Era Cartel are more and more focusing on U.S. homeowners of timeshares in Mexico by advanced and sometimes yearslong telemarketing, impersonation, and advance charge schemes. They use the illicit proceeds to diversify their income streams and finance different felony actions, together with the manufacturing and trafficking of illicit fentanyl and different artificial medication into the USA.”
A July 2024 CBS Information story about these scams notes that U.S. and Mexican officers final 12 months confirmed that as many as eight younger employees had been confirmed useless after they apparently tried to stop jobs at a name heart operated by the Jalisco cartel.

Supply: US Division of the Treasury’s Workplace of Overseas Property Management.
The phony escrow firm the Dimitruks handled — ecurrencyescrow[.]llc — is now not on-line. However the paperwork despatched by their contact there referenced just a few different still-active domains, together with realestateassetsllc[.]com
The unique registration information of each of those domains reference one other area — datasur[.]host — that’s related to dozens of different actual property and escrow-themed domains going again at the least 4 years. A few of these domains are now not lively, whereas others have been beforehand suspended at completely different internet hosting suppliers.
061nyr[.]web
061-newyorkrealty[.]web
1nydevelopersgroupllc[.]com
1oceanrealtyllc[.]com
advancedclosingservicesllc[.]com
americancorporatetitle[.]com
asesorialegalsiglo[.]com
atencion-tributaria.[]com
carolinasctinc[.]web
closingandsettlementservices[.]com
closingandsettlementsllc[.]com
closingsettlementllc[.]com
crefaescrowslimited[.]web
ecurrencyescrow[.]llc
empirerllc[.]com
fiduciarocitibanamex[.]com
fondosmx[.]org
freightescrowcollc[.]com
goldmansachs-investment[.]com
hgvccorp[.]com
infodivisionfinanciera[.]com
internationaladvisorllc[.]com
jadehillrealtyllc[.]com
lewisandassociaterealty[.]com
nyreputable[.]org
privateinvestment.com[.]co
realestateassetsllc[.]com
realestateisinc[.]com
settlementandmanagement[.]com
stllcservices[.]com
stllcservices[.]web
thebluehorizonrealtyinc[.]com
walshrealtyny[.]web
windsorre[.]com
By loading ecurrencyescrowllc[.]com into the Wayback Machine at archive.org, we will see textual content on the prime of the web page that reads, “Go to our useful resource library for movies and instruments designed to make managing your escrow disbursements a breeze.”
Looking out on that little bit of textual content at publicwww.com exhibits the identical textual content seems on the web site of an escrow firm referred to as Escshieldsecurity Community (escshieldsecurity[.]com). This entity claims to have been round since 2009, however the area itself is lower than two years outdated, and there’s no contact info related to the location. The Pennsylvania Secretary of State additionally has no report of a enterprise by this title at its said deal with.
Extremely, Escshieldsecurity pitches itself as an answer to timeshare closing scams.
“By 2015, cyber thieves had realized the quantity of funds concerned and had focused the actual property, title and settlement trade,” the corporate’s web site states. “As funding turned extra advanced and dangerous, brokers and underwriters had little time or sources to maintain up. The trade wanted a easy resolution that allowed it to maintain tempo with new funding safety wants.”
The domains related to this rip-off will typically reference official corporations and licensed professionals in the actual property and shutting companies, however these actual professionals typically don’t know they’re being impersonated till somebody begins asking round. The reality is, the unique reader tip that prompted KrebsOnSecurity to research this scheme got here from one such skilled whose title and popularity was getting used to rip-off others.
It’s unclear whether or not the Dimitruks had been robbed by individuals working for the Jalisco cartel, however it’s clear that whoever is answerable for managing most of the above-mentioned domains — together with the DNS supplier datasur[.]host — lately compromised their pc with information-stealing malware.
That’s in keeping with knowledge collected by the breach monitoring service Constella Intelligence [Constella is currently an advertiser on KrebsOnSecurity]. Constella discovered that somebody utilizing the e-mail deal with uncovered within the DNS information for datasur[.]host — jyanes1920@gmail.com — additionally was relieved of credentials for managing a lot of the domains referenced above at a Mexican internet hosting supplier.
It’s common for victims of such scams to maintain mum about their misfortune. Typically, it’s disgrace and embarrassment that forestalls victims from submitting a report with the native authorities. However on this case, victims who study they’ve been robbed by a violent drug cartel have much more motive to stay silent.
William Dimitruk acknowledged that he and his spouse haven’t but filed a police report. However after acknowledging it may assist stop hurt to different would-be victims, Mr. Dimitruk stated he would contemplate it.
There’s another excuse victims of scams like this could notify authorities: Sometimes, the feds will bust up considered one of these rip-off operations and seize funds that had been stolen from victims. However these investigations can take years, and it may be much more years earlier than the federal government begins making an attempt to determine who bought scammed and the right way to remunerate victims. All too typically, the actual obstacle to returning a few of these losses is that the feds don’t know who the victims are.
If you’re the sufferer of a timeshare rip-off like this, please contemplate submitting a report with the FBI’s Web Crime Grievance Heart (IC3), at ic3.gov. Different locations the place victims might want to file a criticism:
Federal Commerce Fee – https://www.ftccomplaintassistant.gov
Worldwide Client Safety and Enforcement Community – https://www.econsumer.gov/en
Profeco – Mexican Lawyer Common – https://consulmex.sre.gob.mx/montreal/index.php/en/foreigners/services-foreigners/318-consumer-protection