input: USPS: Your package is held due to an unpaid fee. Verify now: http://usps-track-secure.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: FedEx notice: delivery failed. Confirm your address and card details before 6 PM: https://fedex-redelivery-check.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
payment request


input: Your parcel is waiting at customs. Pay the $2.14 clearance fee here: http://customs-parcel-pay.example

expected_risk_level: dangerous

expected_tactics:
fake authority
small fee
suspicious link


input: UPS: We cannot deliver your item until you update your login information: https://ups-account-update.example

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
credential request


input: Postal Service: final attempt today. Your package will be returned unless you verify your details: http://post-office-secure.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: DHL Express: tax unpaid. Pay now or your package will be destroyed: https://dhl-tax-release.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
threat
suspicious link


input: Your Amazon order is delayed. Confirm payment at https://amazon-billing-help.example to avoid cancellation.

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: Package Center: incomplete address. Enter your full name, birth date, and card number here: http://delivery-address-fix.example

expected_risk_level: dangerous

expected_tactics:
suspicious link
credential request
payment request


input: Bank alert: your account is locked. Login immediately to restore access: https://secure-bank-restore.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: Fraud department: unusual transfer detected. Verify your password and one-time code now: http://fraud-review-bank.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: Your debit card will be suspended in 30 minutes. Confirm your PIN here: https://card-security-check.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: Security notice: we blocked a $940 wire. Reply with your full card number to cancel it.

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
credential request


input: Your mobile banking profile expires today. Re-enroll at http://mobile-bank-profile.example

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
suspicious link
credential request


input: Credit union support: your account has been flagged. Send your username so we can verify ownership.

expected_risk_level: dangerous

expected_tactics:
fake authority
credential request


input: Payment failed. Update your wallet seed phrase to keep your funds safe: https://wallet-support-reset.example

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
credential request


input: Zelle support: a $1,200 transfer is pending. To cancel, send $1 to yourself using the instructions at https://zelle-cancel-flow.example

expected_risk_level: dangerous

expected_tactics:
fake authority
payment request
suspicious link
urgency


input: Hi Grandma, I lost my phone. This is my new number. Can you send $800 for rent today? Please don't tell Mom.

expected_risk_level: dangerous

expected_tactics:
impersonation
urgency
secrecy
payment pressure


input: Mom it's me. I got in a wreck and need bail money. Please wire $1,500 now and don't call anyone.

expected_risk_level: dangerous

expected_tactics:
impersonation
urgency
secrecy
payment pressure
emotional manipulation


input: Grandpa, my phone broke. Text me on this number only. I need help paying a bill before midnight.

expected_risk_level: dangerous

expected_tactics:
impersonation
urgency
new channel


input: Auntie please don't tell Dad. I need gift cards for an emergency and I'll pay you back tomorrow.

expected_risk_level: dangerous

expected_tactics:
impersonation
secrecy
payment pressure
emotional manipulation


input: This is your son using a friend's phone. I am stranded. Can you send crypto to this wallet right away?

expected_risk_level: dangerous

expected_tactics:
impersonation
urgency
payment pressure
new channel


input: Hi, this is your niece. I changed numbers. Can you send me the code that just came to your phone?

expected_risk_level: dangerous

expected_tactics:
impersonation
new channel
credential request


input: Grandma I am in trouble. Please send money through Zelle today. I cannot talk on the phone.

expected_risk_level: dangerous

expected_tactics:
impersonation
urgency
payment pressure
refuses verification


input: This is your manager. I need you to buy three gift cards immediately and send me the codes. I am in a meeting.

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
payment pressure
gift cards


input: Can you do me a favor? Pick up $500 in Apple cards and scratch the backs. I need the photos ASAP.

expected_risk_level: dangerous

expected_tactics:
payment pressure
gift cards
urgency


input: Past-due tax notice: settle today with prepaid cards to avoid legal action.

expected_risk_level: dangerous

expected_tactics:
fake authority
threat
urgency
gift cards


input: Your computer repair invoice must be paid with Google Play cards before service can continue.

expected_risk_level: dangerous

expected_tactics:
payment pressure
gift cards
fake invoice


input: School fundraiser urgent: send gift card codes to this temporary number so your child keeps their spot.

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
gift cards
emotional manipulation


input: Payroll issue: buy $300 in Steam cards and email the codes to verify your direct deposit.

expected_risk_level: dangerous

expected_tactics:
fake authority
gift cards
credential request
payment pressure


input: I am the pastor. A family needs help now. Please send the gift card numbers to this phone.

expected_risk_level: dangerous

expected_tactics:
fake authority
emotional manipulation
gift cards
new channel


input: Microsoft Security: your device is infected. Call the support number on this message within 10 minutes.

expected_risk_level: dangerous

expected_tactics:
fake authority
urgency
threat
callback request


input: Your antivirus subscription renewed for $399. To cancel, download the refund tool: http://refund-support-tool.example

expected_risk_level: dangerous

expected_tactics:
fake invoice
suspicious link
refund bait


input: Apple support: we found hackers on your iCloud. Reply with the 6-digit code to remove them.

expected_risk_level: dangerous

expected_tactics:
fake authority
credential request
fear


input: Browser warning: your files are being deleted. Call certified support now at the number shown here.

expected_risk_level: dangerous

expected_tactics:
fear
urgency
callback request


input: Geek Help Desk invoice: $289 charge approved. If this was not you, call this number for a refund.

expected_risk_level: dangerous

expected_tactics:
fake invoice
callback request
refund bait


input: Congratulations! You won an iPhone. Pay a $9.99 shipping fee here: https://winner-shipping.example

expected_risk_level: dangerous

expected_tactics:
too good to be true
payment request
suspicious link


input: Lottery office: your unclaimed prize is ready. Send your bank login so we can deposit winnings.

expected_risk_level: dangerous

expected_tactics:
too good to be true
fake authority
credential request


input: You have been selected for a government grant. Processing fee required by midnight: http://grant-release.example

expected_risk_level: dangerous

expected_tactics:
fake authority
payment request
urgency
suspicious link


input: Claim your free vacation now. We only need your card number to hold the reservation.

expected_risk_level: dangerous

expected_tactics:
too good to be true
payment request
urgency


input: Final notice: your reward points expire today. Login at https://points-claim-center.example to cash out.

expected_risk_level: dangerous

expected_tactics:
urgency
suspicious link
credential request


category: romance

input: I feel so close to you. My wallet was stolen while traveling. Can you send $300 so I can get home?

expected_risk_level: dangerous

expected_tactics:
emotional manipulation
payment pressure
urgency


category: romance

input: I want to visit you, but the travel agent needs payment today. Please send it by wire transfer.

expected_risk_level: dangerous

expected_tactics:
emotional manipulation
payment pressure
urgency


category: romance

input: Do not tell your family about us yet. I need help with a hospital bill before we can meet.

expected_risk_level: dangerous

expected_tactics:
secrecy
emotional manipulation
payment pressure


input: Remote job approved. Deposit this check and send part of it to the equipment vendor today.

expected_risk_level: dangerous

expected_tactics:
fake job
payment pressure
overpayment


input: You are hired. Pay a refundable $75 onboarding fee at https://newhire-start.example to unlock training.

expected_risk_level: dangerous

expected_tactics:
fake job
payment request
suspicious link


category: suspicious

input: Your account needs attention. Visit http://account-message-center.example when you have time.

expected_risk_level: suspicious

expected_tactics:
suspicious link
vague request


category: suspicious

input: We could not process your request. Open https://customer-resolution.example for details.

expected_risk_level: suspicious

expected_tactics:
suspicious link
vague request


category: suspicious

input: Your profile is incomplete. Confirm your information here: http://profile-update-center.example

expected_risk_level: suspicious

expected_tactics:
suspicious link
credential request


category: suspicious

input: Please review the secure document I shared: https://document-viewer-secure.example

expected_risk_level: suspicious

expected_tactics:
suspicious link
vague request


category: suspicious

input: Your voicemail is available at http://voice-message-download.example

expected_risk_level: suspicious

expected_tactics:
suspicious link
attachment bait


category: suspicious

input: Please call me back immediately about your account. This cannot wait.

expected_risk_level: suspicious

expected_tactics:
urgency
vague request


category: suspicious

input: Your subscription has a problem. We need confirmation today or it may be closed.

expected_risk_level: suspicious

expected_tactics:
urgency
vague request


category: suspicious

input: Final reminder: your paperwork is missing. Send your details by end of day.

expected_risk_level: suspicious

expected_tactics:
urgency
credential request
vague request


category: suspicious

input: Action required: confirm ownership of your account within 24 hours.

expected_risk_level: suspicious

expected_tactics:
urgency
credential request


category: suspicious

input: We noticed an issue with your delivery. Respond quickly so we can resolve it.

expected_risk_level: suspicious

expected_tactics:
urgency
vague request


category: suspicious

input: Hi, this is support. We need to confirm your billing info.

expected_risk_level: suspicious

expected_tactics:
fake authority
credential request
vague sender


category: suspicious

input: This is the office. Please send your date of birth so we can update your file.

expected_risk_level: suspicious

expected_tactics:
credential request
vague sender


category: suspicious

input: Your invoice is attached. Open it and enter the requested information.

expected_risk_level: suspicious

expected_tactics:
attachment bait
credential request


category: suspicious

input: We tried reaching you. Use this temporary number from now on.

expected_risk_level: suspicious

expected_tactics:
new channel
vague sender


category: suspicious

input: I am from payroll. Confirm your direct deposit account today.

expected_risk_level: suspicious

expected_tactics:
fake authority
urgency
credential request


category: suspicious

input: I want to buy your item. I will send extra money and my mover will pick it up.

expected_risk_level: suspicious

expected_tactics: overpayment marketplace


category: suspicious

input: Can you verify you are real by sending me the code I just texted you?

expected_risk_level: suspicious

expected_tactics:
credential request
verification code


category: suspicious

input: I only use this escrow service for marketplace purchases: https://safe-escrow-pay.example

expected_risk_level: suspicious

expected_tactics:
suspicious link
marketplace
payment pressure


category: suspicious

input: The courier needs a small insurance payment before pickup. I will reimburse you.

expected_risk_level: suspicious

expected_tactics:
payment request
marketplace
advance fee


category: suspicious

input: I am out of town but my assistant will handle payment. Please email your bank name.

expected_risk_level: suspicious

expected_tactics:
marketplace
credential request
third party


input: Bank fraud alert: Did you attempt a $249.00 purchase at TARGET? Reply YES or NO.


input: Your bank card ending 1234 was used for $18.42 at Grocery Store. If this was not you, call the number on your card.

expected_tactics:
verification needed
trusted route


input: Credit union alert: new login from a browser. Open your banking app directly if this was not you.

expected_tactics:
verification needed
trusted route


input: Your statement is ready. Log in through the official app to view it.

expected_tactics:
verification needed
trusted route


input: A transfer is scheduled for tomorrow. If you did not schedule this, contact customer service using the number on your card.

expected_tactics:
verification needed
trusted route


input: UPS update: your package is out for delivery today. Track it in the UPS app.

expected_tactics:
verification needed
trusted route


input: FedEx delivery exception: weather delay reported. Check status on the official FedEx site.

expected_tactics:
verification needed
trusted route


input: Your pharmacy order shipped. Open your pharmacy account if you need details.

expected_tactics:
verification needed
trusted route


input: A package requiring signature is scheduled for tomorrow. No reply needed.


input: Your store pickup is ready. Bring your ID and order confirmation to the service desk.


input: Reminder: dental appointment tomorrow at 2 PM. Call the office number you already have if you need to reschedule.

expected_tactics:
verification needed
trusted route


input: Your lab results are available in the patient portal. Log in through the clinic website.

expected_tactics:
verification needed
trusted route


input: Insurance notice: a claim was processed. Review it in your official member portal.

expected_tactics:
verification needed
trusted route


input: Your password was changed. If this was not you, open the app directly and review account security.

expected_tactics:
verification needed
trusted route


input: Your verification code is 482910. Do not share this code with anyone.

expected_tactics:
verification needed
code warning


input: New device added to your account. Visit your account settings through the official app if this was not you.

expected_tactics:
verification needed
trusted route


input: School reminder: permission forms are due Friday. Check the parent portal for details.

expected_tactics:
verification needed
trusted route


input: Library notice: your borrowed item is overdue. Log in to your library account to renew.

expected_tactics:
verification needed
trusted route


input: Your utility bill is ready. No payment is due until next week. View it through your normal account.

expected_tactics:
verification needed
trusted route


input: Payment reminder from your subscription service. If unsure, open the official app instead of using message links.

expected_tactics:
verification needed
trusted route


category: safe

input: Running ten minutes late. See you at the restaurant soon.

expected_risk_level: safe


category: safe

input: Can you bring milk on the way home?

expected_risk_level: safe


category: safe

input: Happy birthday! Hope you have a great day.

expected_risk_level: safe


category: safe

input: The meeting moved to 3 PM. Same room as before.

expected_risk_level: safe


category: safe

input: Dinner is at our house Saturday. No need to bring anything.

expected_risk_level: safe


category: safe

input: Please review the agenda before our team call tomorrow.

expected_risk_level: safe


category: safe

input: The report draft is in the shared project folder.

expected_risk_level: safe


category: safe

input: I moved the deadline to Monday so everyone has more time.

expected_risk_level: safe


category: safe

input: Thanks for sending the notes. I added two comments.

expected_risk_level: safe


category: safe

input: Reminder: the office is closed Friday for the holiday.

expected_risk_level: safe


category: safe

input: Weekend sale: 20 percent off selected items in store.

expected_risk_level: safe


category: safe

input: Your coffee shop rewards balance updated after your last visit.

expected_risk_level: safe


category: safe

input: New class schedule posted for next month.

expected_risk_level: safe


category: safe

input: Your local bookstore has your preorder ready at the counter.

expected_risk_level: safe


category: safe

input: Thanks for your purchase. Your receipt is available in your account.

expected_risk_level: safe