ALARM bells should have gone off with that letter offering two million Sinovac doses for Penang. There was no letterhead, the sender used a Sabah house address and the offered transaction was stipulated to be through a personal account in a foreign bank. A quick check would have revealed the discrepancy in the company name mentioned on the letter as there is no "Xintai Development Enterprise Ltd" but there is a "Xintai Enterprise Development Ltd" registered in Hong Kong in 2013. This company is shown to be located in the Bank of America Tower in Hong Kong, but although it is registered and active – nothing else shows up on an online search for it.