| {"id": "fresh_2026_toll_smishing_00", "category": "toll_smishing", "input": "Final notice: your unpaid road toll of $3.25 is past due. Avoid a $35 late charge today: https://pay-toll-review.example/case-00-00", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_01", "category": "toll_smishing", "input": "State tolls: plate [license plate] has an unpaid balance. Pay before midnight or registration may be restricted: https://toll-service.example/case-00-01", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_02", "category": "toll_smishing", "input": "EZPass notice: your toll invoice could not be processed. Update payment to prevent extra fees: http://ezpass-billing.example/case-00-02", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_03", "category": "toll_smishing", "input": "Parking & toll office: your vehicle has an unresolved toll citation. Scan [QR code] or visit https://city-toll.example/case-00-03", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_04", "category": "toll_smishing", "input": "Final notice: your unpaid road toll of $4.95 is past due. Avoid a $25 late charge today: https://pay-toll-review.example/case-00-04", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_05", "category": "toll_smishing", "input": "State tolls: plate [license plate] has an unpaid balance. Pay before midnight or registration may be restricted: https://toll-service.example/case-00-05", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_06", "category": "toll_smishing", "input": "EZPass notice: your toll invoice could not be processed. Update payment to prevent extra fees: http://ezpass-billing.example/case-00-06", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_toll_smishing_07", "category": "toll_smishing", "input": "Parking & toll office: your vehicle has an unresolved toll citation. Scan [QR code] or visit https://city-toll.example/case-00-07", "expected_risk_level": "dangerous", "expected_scam_type": "toll_smishing", "expected_tactics": ["fake authority", "payment pressure", "suspicious link", "urgency"]} | |
| {"id": "fresh_2026_package_delivery_00", "category": "package_phishing", "input": "USPS: your package is on hold because the delivery address is incomplete. Confirm details here: https://usps-address.example/case-01-00", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_01", "category": "package_phishing", "input": "FedEx notice: we could not clear your parcel. Pay the small customs fee today: http://fedex-clearance.example/case-01-01", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_02", "category": "package_phishing", "input": "UPS: final attempt scheduled. Rebook delivery and verify card details: https://ups-reschedule.example/case-01-02", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_03", "category": "package_phishing", "input": "Postal alert: package held at warehouse. Update your address and contact number within 12 hours: https://post-track.example/case-01-03", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_04", "category": "package_phishing", "input": "USPS: your package is on hold because the delivery address is incomplete. Confirm details here: https://usps-address.example/case-01-04", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_05", "category": "package_phishing", "input": "FedEx notice: we could not clear your parcel. Pay the small customs fee today: http://fedex-clearance.example/case-01-05", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_06", "category": "package_phishing", "input": "UPS: final attempt scheduled. Rebook delivery and verify card details: https://ups-reschedule.example/case-01-06", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_package_delivery_07", "category": "package_phishing", "input": "Postal alert: package held at warehouse. Update your address and contact number within 12 hours: https://post-track.example/case-01-07", "expected_risk_level": "dangerous", "expected_scam_type": "package_phishing", "expected_tactics": ["fake authority", "suspicious link", "delivery pressure", "credential request"]} | |
| {"id": "fresh_2026_bank_callback_00", "category": "callback_phishing", "input": "Fraud alert: a $786.21 transaction is pending on your card. If this was not you, call support now at [callback number].", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_01", "category": "callback_phishing", "input": "Credit Union security: new device added to your account. To cancel, contact our fraud desk immediately at [callback number].", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_02", "category": "callback_phishing", "input": "Coinbase alert: your phone number change request is processing. If this was not you, call support at [callback number].", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_03", "category": "callback_phishing", "input": "PayPal security: unusual login detected. Reply NO or call [callback number] to stop account closure.", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_04", "category": "callback_phishing", "input": "Fraud alert: a $93.40 transaction is pending on your card. If this was not you, call support now at [callback number].", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_05", "category": "callback_phishing", "input": "Credit Union security: new device added to your account. To cancel, contact our fraud desk immediately at [callback number].", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_06", "category": "callback_phishing", "input": "Coinbase alert: your phone number change request is processing. If this was not you, call support at [callback number].", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_bank_callback_07", "category": "callback_phishing", "input": "PayPal security: unusual login detected. Reply NO or call [callback number] to stop account closure.", "expected_risk_level": "dangerous", "expected_scam_type": "callback_phishing", "expected_tactics": ["fake authority", "callback request", "account takeover", "urgency"]} | |
| {"id": "fresh_2026_task_job_00", "category": "job_scam", "input": "Hi, I am recruiting remote assistants for TikTok Shop. Work 60 minutes daily and earn $$180-$540/day. Contact WhatsApp [phone number].", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_01", "category": "job_scam", "input": "Part-time app optimization role available. Tasks are simple, pay is instant, training starts today. Message [phone number] on Telegram.", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_02", "category": "job_scam", "input": "We saw your resume and selected you for a product rating job. Deposit the onboarding fee and receive your first task bonus.", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_03", "category": "job_scam", "input": "Remote payroll assistant needed. We send customer funds to your account and you forward them to vendors. Apply via WhatsApp [phone number].", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_04", "category": "job_scam", "input": "Hi, I am recruiting remote assistants for TikTok Shop. Work 60 minutes daily and earn $$200-$650/day. Contact WhatsApp [phone number].", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_05", "category": "job_scam", "input": "Part-time app optimization role available. Tasks are simple, pay is instant, training starts today. Message [phone number] on Telegram.", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_06", "category": "job_scam", "input": "We saw your resume and selected you for a product rating job. Deposit the onboarding fee and receive your first task bonus.", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_task_job_07", "category": "job_scam", "input": "Remote payroll assistant needed. We send customer funds to your account and you forward them to vendors. Apply via WhatsApp [phone number].", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "too good to be true", "off-platform contact", "payment bait"]} | |
| {"id": "fresh_2026_wrong_number_crypto_00", "category": "investment_scam", "input": "Sorry, is this Daniel from yoga? I saved the wrong number. You seem kind. My aunt is teaching me a crypto strategy that made $$6,400 this week.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_01", "category": "investment_scam", "input": "I thought this was my driver. Since we met by accident, maybe it is fate. Do you use exchange accounts? I can show you a short-term coin plan.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_02", "category": "investment_scam", "input": "Wrong number, sorry. By the way I work in gold futures and there is a low-risk entry tonight. I can guide you if you open this wallet app.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_03", "category": "investment_scam", "input": "This is embarrassing, I texted the wrong person. You are friendly. My mentor has a private trading group with guaranteed daily returns.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_04", "category": "investment_scam", "input": "Sorry, is this Daniel from yoga? I saved the wrong number. You seem kind. My aunt is teaching me a crypto strategy that made $$4,800 this week.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_05", "category": "investment_scam", "input": "I thought this was my driver. Since we met by accident, maybe it is fate. Do you use exchange accounts? I can show you a short-term coin plan.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_06", "category": "investment_scam", "input": "Wrong number, sorry. By the way I work in gold futures and there is a low-risk entry tonight. I can guide you if you open this wallet app.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_wrong_number_crypto_07", "category": "investment_scam", "input": "This is embarrassing, I texted the wrong person. You are friendly. My mentor has a private trading group with guaranteed daily returns.", "expected_risk_level": "dangerous", "expected_scam_type": "investment_scam", "expected_tactics": ["wrong number", "relationship building", "crypto bait", "payment pressure"]} | |
| {"id": "fresh_2026_mfa_code_theft_00", "category": "credential_theft", "input": "Security desk: to stop the password reset, send us the 6-digit code you just received. Do not delay or your account will lock.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_01", "category": "credential_theft", "input": "Bank support here. We are reversing a suspicious transfer. Read back the one-time code so we can verify ownership.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_02", "category": "credential_theft", "input": "Your Apple ID is being recovered. If you did not request this, reply with the verification code to cancel the change.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_03", "category": "credential_theft", "input": "Coinbase support: we need the login code from your phone to secure your wallet from unauthorized withdrawal.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_04", "category": "credential_theft", "input": "Security desk: to stop the password reset, send us the 6-digit code you just received. Do not delay or your account will lock.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_05", "category": "credential_theft", "input": "Bank support here. We are reversing a suspicious transfer. Read back the one-time code so we can verify ownership.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_06", "category": "credential_theft", "input": "Your Apple ID is being recovered. If you did not request this, reply with the verification code to cancel the change.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_mfa_code_theft_07", "category": "credential_theft", "input": "Coinbase support: we need the login code from your phone to secure your wallet from unauthorized withdrawal.", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["verification code theft", "fake authority", "urgency"]} | |
| {"id": "fresh_2026_government_benefit_00", "category": "government_impersonation", "input": "IRS refund notice: you are eligible for a $93.40 payment. Confirm bank details before the deadline: https://irs-refund.example/case-06-00", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_01", "category": "government_impersonation", "input": "DMV: your license will be suspended due to unpaid compliance fee. Resolve today: http://dmv-case.example/case-06-01", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_02", "category": "government_impersonation", "input": "Social Security update: benefits are paused until you upload ID and banking info: https://ssa-verify.example/case-06-02", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_03", "category": "government_impersonation", "input": "Medicare card renewal: confirm your identity and payment method to avoid coverage interruption: https://medicare-renew.example/case-06-03", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_04", "category": "government_impersonation", "input": "IRS refund notice: you are eligible for a $786.21 payment. Confirm bank details before the deadline: https://irs-refund.example/case-06-04", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_05", "category": "government_impersonation", "input": "DMV: your license will be suspended due to unpaid compliance fee. Resolve today: http://dmv-case.example/case-06-05", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_06", "category": "government_impersonation", "input": "Social Security update: benefits are paused until you upload ID and banking info: https://ssa-verify.example/case-06-06", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_government_benefit_07", "category": "government_impersonation", "input": "Medicare card renewal: confirm your identity and payment method to avoid coverage interruption: https://medicare-renew.example/case-06-07", "expected_risk_level": "dangerous", "expected_scam_type": "government_impersonation", "expected_tactics": ["fake authority", "suspicious link", "benefit bait", "credential request"]} | |
| {"id": "fresh_2026_marketplace_payment_00", "category": "marketplace_scam", "input": "I want the couch today. My mover will pick it up. I overpaid by $2,180.00; please Zelle the difference to the courier.", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_01", "category": "marketplace_scam", "input": "Your listing is perfect. To prove you are real, send me the 6-digit code the marketplace sends you.", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_02", "category": "marketplace_scam", "input": "I paid through escrow but the courier fee is missing. Please use this link to release funds: https://market-escrow.example/case-07-02", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_03", "category": "marketplace_scam", "input": "I can buy now, but my assistant handles payment. Email your bank name so accounting can verify the transfer.", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_04", "category": "marketplace_scam", "input": "I want the couch today. My mover will pick it up. I overpaid by $1,240.50; please Zelle the difference to the courier.", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_05", "category": "marketplace_scam", "input": "Your listing is perfect. To prove you are real, send me the 6-digit code the marketplace sends you.", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_06", "category": "marketplace_scam", "input": "I paid through escrow but the courier fee is missing. Please use this link to release funds: https://market-escrow.example/case-07-06", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_marketplace_payment_07", "category": "marketplace_scam", "input": "I can buy now, but my assistant handles payment. Email your bank name so accounting can verify the transfer.", "expected_risk_level": "dangerous", "expected_scam_type": "marketplace_scam", "expected_tactics": ["marketplace", "off-platform contact", "overpayment", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_00", "category": "tech_support", "input": "Microsoft security warning: your device is sending spam. Call the number shown and install the remote cleanup tool.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_01", "category": "tech_support", "input": "Apple support: your iCloud has malware activity. Call [callback number] and read the screen code to the technician.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_02", "category": "tech_support", "input": "Browser alert: bank login exposed. Do not turn off your computer. Call support at [callback number] for live repair.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_03", "category": "tech_support", "input": "Antivirus renewal failed. Your files may be deleted. Pay the cleanup fee and give the technician remote access.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_04", "category": "tech_support", "input": "Microsoft security warning: your device is sending spam. Call the number shown and install the remote cleanup tool.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_05", "category": "tech_support", "input": "Apple support: your iCloud has malware activity. Call [callback number] and read the screen code to the technician.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_06", "category": "tech_support", "input": "Browser alert: bank login exposed. Do not turn off your computer. Call support at [callback number] for live repair.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_tech_support_ai_07", "category": "tech_support", "input": "Antivirus renewal failed. Your files may be deleted. Pay the cleanup fee and give the technician remote access.", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "remote access request", "callback request", "payment pressure"]} | |
| {"id": "fresh_2026_needs_check_bank_purchase_00", "category": "legitimate_needs_check", "input": "Bank alert: Did you attempt a $786.21 card purchase at STORE? Reply YES or NO. If unsure, use the number on your card.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_bank_purchase_01", "category": "legitimate_needs_check", "input": "Bank alert: Did you attempt a $1,240.50 card purchase at STORE? Reply YES or NO. If unsure, use the number on your card.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_package_notice_00", "category": "legitimate_needs_check", "input": "UPS notice: your package status changed to out for delivery. Track it in the official app or on the website you normally use.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_package_notice_01", "category": "legitimate_needs_check", "input": "UPS notice: your package status changed to out for delivery. Track it in the official app or on the website you normally use.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_toll_statement_00", "category": "legitimate_needs_check", "input": "Your toll account statement is ready. Open your toll provider app or saved bookmark to review recent charges.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_toll_statement_01", "category": "legitimate_needs_check", "input": "Your toll account statement is ready. Open your toll provider app or saved bookmark to review recent charges.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_school_payment_00", "category": "legitimate_needs_check", "input": "School portal reminder: activity fee is due Friday. Please log in through the district parent portal to review.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_school_payment_01", "category": "legitimate_needs_check", "input": "School portal reminder: activity fee is due Friday. Please log in through the district parent portal to review.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_health_portal_00", "category": "legitimate_needs_check", "input": "Clinic message: new billing statement available. Use your patient portal or call the clinic number you already have.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_health_portal_01", "category": "legitimate_needs_check", "input": "Clinic message: new billing statement available. Use your patient portal or call the clinic number you already have.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_subscription_00", "category": "legitimate_needs_check", "input": "Streaming service: your payment method expires soon. Open the app directly if you want to update billing.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_subscription_01", "category": "legitimate_needs_check", "input": "Streaming service: your payment method expires soon. Open the app directly if you want to update billing.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_credit_union_00", "category": "legitimate_needs_check", "input": "Credit union notice: secure message available. Log in through your saved banking app to view it.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_credit_union_01", "category": "legitimate_needs_check", "input": "Credit union notice: secure message available. Log in through your saved banking app to view it.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_delivery_fee_00", "category": "legitimate_needs_check", "input": "Local courier: delivery requires signature tomorrow. Call the business you ordered from if this looks unfamiliar.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_needs_check_delivery_fee_01", "category": "legitimate_needs_check", "input": "Local courier: delivery requires signature tomorrow. Call the business you ordered from if this looks unfamiliar.", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["official route needed"]} | |
| {"id": "fresh_2026_safe_dentist_00", "category": "safe_benign", "input": "Your dentist appointment is confirmed for Tuesday at 2:00 PM. Reply C to confirm or R to reschedule.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_dentist_01", "category": "safe_benign", "input": "Your dentist appointment is confirmed for Tuesday at 2:00 PM. Reply C to confirm or R to reschedule. Thanks.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_library_00", "category": "safe_benign", "input": "Library notice: the book you requested is ready for pickup at the front desk until Saturday.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_library_01", "category": "safe_benign", "input": "Library notice: the book you requested is ready for pickup at the front desk until Saturday. Thanks.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_family_dinner_00", "category": "safe_benign", "input": "Hi Grandma, we are bringing soup at 6. No need to cook tonight.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_family_dinner_01", "category": "safe_benign", "input": "Hi Grandma, we are bringing soup at 6. No need to cook tonight. Thanks.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_school_pickup_00", "category": "safe_benign", "input": "School reminder: early pickup is at 1:30 PM today. Bring your usual ID to the office.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_school_pickup_01", "category": "safe_benign", "input": "School reminder: early pickup is at 1:30 PM today. Bring your usual ID to the office. Thanks.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_pharmacy_ready_00", "category": "safe_benign", "input": "Pharmacy: your prescription is ready for pickup. Call the store number on your bottle if you have questions.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_pharmacy_ready_01", "category": "safe_benign", "input": "Pharmacy: your prescription is ready for pickup. Call the store number on your bottle if you have questions. Thanks.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_weather_00", "category": "safe_benign", "input": "Weather alert: snow route starts at 7 PM. Please move cars from the street if possible.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |
| {"id": "fresh_2026_safe_weather_01", "category": "safe_benign", "input": "Weather alert: snow route starts at 7 PM. Please move cars from the street if possible. Thanks.", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": []} | |