input: Final notice: your unpaid road toll of $3.25 is past due. Avoid a $35 late charge today: https://pay-toll-review.example/case-00-00

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: State tolls: plate [license plate] has an unpaid balance. Pay before midnight or registration may be restricted: https://toll-service.example/case-00-01

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: EZPass notice: your toll invoice could not be processed. Update payment to prevent extra fees: http://ezpass-billing.example/case-00-02

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: Parking & toll office: your vehicle has an unresolved toll citation. Scan [QR code] or visit https://city-toll.example/case-00-03

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: Final notice: your unpaid road toll of $4.95 is past due. Avoid a $25 late charge today: https://pay-toll-review.example/case-00-04

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: State tolls: plate [license plate] has an unpaid balance. Pay before midnight or registration may be restricted: https://toll-service.example/case-00-05

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: EZPass notice: your toll invoice could not be processed. Update payment to prevent extra fees: http://ezpass-billing.example/case-00-06

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: Parking & toll office: your vehicle has an unresolved toll citation. Scan [QR code] or visit https://city-toll.example/case-00-07

expected_risk_level: dangerous

expected_tactics:
fake authority
payment pressure
suspicious link
urgency


input: USPS: your package is on hold because the delivery address is incomplete. Confirm details here: https://usps-address.example/case-01-00

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: FedEx notice: we could not clear your parcel. Pay the small customs fee today: http://fedex-clearance.example/case-01-01

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: UPS: final attempt scheduled. Rebook delivery and verify card details: https://ups-reschedule.example/case-01-02

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: Postal alert: package held at warehouse. Update your address and contact number within 12 hours: https://post-track.example/case-01-03

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: USPS: your package is on hold because the delivery address is incomplete. Confirm details here: https://usps-address.example/case-01-04

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: FedEx notice: we could not clear your parcel. Pay the small customs fee today: http://fedex-clearance.example/case-01-05

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: UPS: final attempt scheduled. Rebook delivery and verify card details: https://ups-reschedule.example/case-01-06

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: Postal alert: package held at warehouse. Update your address and contact number within 12 hours: https://post-track.example/case-01-07

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
delivery pressure
credential request


input: Fraud alert: a $786.21 transaction is pending on your card. If this was not you, call support now at [callback number].

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: Credit Union security: new device added to your account. To cancel, contact our fraud desk immediately at [callback number].

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: Coinbase alert: your phone number change request is processing. If this was not you, call support at [callback number].

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: PayPal security: unusual login detected. Reply NO or call [callback number] to stop account closure.

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: Fraud alert: a $93.40 transaction is pending on your card. If this was not you, call support now at [callback number].

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: Credit Union security: new device added to your account. To cancel, contact our fraud desk immediately at [callback number].

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: Coinbase alert: your phone number change request is processing. If this was not you, call support at [callback number].

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: PayPal security: unusual login detected. Reply NO or call [callback number] to stop account closure.

expected_risk_level: dangerous

expected_tactics:
fake authority
callback request
account takeover
urgency


input: Hi, I am recruiting remote assistants for TikTok Shop. Work 60 minutes daily and earn $$180-$540/day. Contact WhatsApp [phone number].

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: Part-time app optimization role available. Tasks are simple, pay is instant, training starts today. Message [phone number] on Telegram.

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: We saw your resume and selected you for a product rating job. Deposit the onboarding fee and receive your first task bonus.

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: Remote payroll assistant needed. We send customer funds to your account and you forward them to vendors. Apply via WhatsApp [phone number].

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: Hi, I am recruiting remote assistants for TikTok Shop. Work 60 minutes daily and earn $$200-$650/day. Contact WhatsApp [phone number].

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: Part-time app optimization role available. Tasks are simple, pay is instant, training starts today. Message [phone number] on Telegram.

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: We saw your resume and selected you for a product rating job. Deposit the onboarding fee and receive your first task bonus.

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: Remote payroll assistant needed. We send customer funds to your account and you forward them to vendors. Apply via WhatsApp [phone number].

expected_risk_level: dangerous

expected_tactics:
fake job
too good to be true
off-platform contact
payment bait


input: Sorry, is this Daniel from yoga? I saved the wrong number. You seem kind. My aunt is teaching me a crypto strategy that made $$6,400 this week.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: I thought this was my driver. Since we met by accident, maybe it is fate. Do you use exchange accounts? I can show you a short-term coin plan.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: Wrong number, sorry. By the way I work in gold futures and there is a low-risk entry tonight. I can guide you if you open this wallet app.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: This is embarrassing, I texted the wrong person. You are friendly. My mentor has a private trading group with guaranteed daily returns.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: Sorry, is this Daniel from yoga? I saved the wrong number. You seem kind. My aunt is teaching me a crypto strategy that made $$4,800 this week.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: I thought this was my driver. Since we met by accident, maybe it is fate. Do you use exchange accounts? I can show you a short-term coin plan.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: Wrong number, sorry. By the way I work in gold futures and there is a low-risk entry tonight. I can guide you if you open this wallet app.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: This is embarrassing, I texted the wrong person. You are friendly. My mentor has a private trading group with guaranteed daily returns.

expected_risk_level: dangerous

expected_tactics:
wrong number
relationship building
crypto bait
payment pressure


input: Security desk: to stop the password reset, send us the 6-digit code you just received. Do not delay or your account will lock.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Bank support here. We are reversing a suspicious transfer. Read back the one-time code so we can verify ownership.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Your Apple ID is being recovered. If you did not request this, reply with the verification code to cancel the change.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Coinbase support: we need the login code from your phone to secure your wallet from unauthorized withdrawal.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Security desk: to stop the password reset, send us the 6-digit code you just received. Do not delay or your account will lock.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Bank support here. We are reversing a suspicious transfer. Read back the one-time code so we can verify ownership.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Your Apple ID is being recovered. If you did not request this, reply with the verification code to cancel the change.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: Coinbase support: we need the login code from your phone to secure your wallet from unauthorized withdrawal.

expected_risk_level: dangerous

expected_tactics:
verification code theft
fake authority
urgency


input: IRS refund notice: you are eligible for a $93.40 payment. Confirm bank details before the deadline: https://irs-refund.example/case-06-00

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: DMV: your license will be suspended due to unpaid compliance fee. Resolve today: http://dmv-case.example/case-06-01

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: Social Security update: benefits are paused until you upload ID and banking info: https://ssa-verify.example/case-06-02

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: Medicare card renewal: confirm your identity and payment method to avoid coverage interruption: https://medicare-renew.example/case-06-03

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: IRS refund notice: you are eligible for a $786.21 payment. Confirm bank details before the deadline: https://irs-refund.example/case-06-04

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: DMV: your license will be suspended due to unpaid compliance fee. Resolve today: http://dmv-case.example/case-06-05

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: Social Security update: benefits are paused until you upload ID and banking info: https://ssa-verify.example/case-06-06

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: Medicare card renewal: confirm your identity and payment method to avoid coverage interruption: https://medicare-renew.example/case-06-07

expected_risk_level: dangerous

expected_tactics:
fake authority
suspicious link
benefit bait
credential request


input: I want the couch today. My mover will pick it up. I overpaid by $2,180.00; please Zelle the difference to the courier.

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: Your listing is perfect. To prove you are real, send me the 6-digit code the marketplace sends you.

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: I paid through escrow but the courier fee is missing. Please use this link to release funds: https://market-escrow.example/case-07-02

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: I can buy now, but my assistant handles payment. Email your bank name so accounting can verify the transfer.

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: I want the couch today. My mover will pick it up. I overpaid by $1,240.50; please Zelle the difference to the courier.

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: Your listing is perfect. To prove you are real, send me the 6-digit code the marketplace sends you.

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: I paid through escrow but the courier fee is missing. Please use this link to release funds: https://market-escrow.example/case-07-06

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: I can buy now, but my assistant handles payment. Email your bank name so accounting can verify the transfer.

expected_risk_level: dangerous

expected_tactics:
marketplace
off-platform contact
overpayment
payment pressure


input: Microsoft security warning: your device is sending spam. Call the number shown and install the remote cleanup tool.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Apple support: your iCloud has malware activity. Call [callback number] and read the screen code to the technician.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Browser alert: bank login exposed. Do not turn off your computer. Call support at [callback number] for live repair.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Antivirus renewal failed. Your files may be deleted. Pay the cleanup fee and give the technician remote access.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Microsoft security warning: your device is sending spam. Call the number shown and install the remote cleanup tool.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Apple support: your iCloud has malware activity. Call [callback number] and read the screen code to the technician.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Browser alert: bank login exposed. Do not turn off your computer. Call support at [callback number] for live repair.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Antivirus renewal failed. Your files may be deleted. Pay the cleanup fee and give the technician remote access.

expected_risk_level: dangerous

expected_tactics:
fake authority
remote access request
callback request
payment pressure


input: Bank alert: Did you attempt a $786.21 card purchase at STORE? Reply YES or NO. If unsure, use the number on your card.


input: Bank alert: Did you attempt a $1,240.50 card purchase at STORE? Reply YES or NO. If unsure, use the number on your card.


input: UPS notice: your package status changed to out for delivery. Track it in the official app or on the website you normally use.


input: UPS notice: your package status changed to out for delivery. Track it in the official app or on the website you normally use.


input: Your toll account statement is ready. Open your toll provider app or saved bookmark to review recent charges.


input: Your toll account statement is ready. Open your toll provider app or saved bookmark to review recent charges.


input: School portal reminder: activity fee is due Friday. Please log in through the district parent portal to review.


input: School portal reminder: activity fee is due Friday. Please log in through the district parent portal to review.


input: Clinic message: new billing statement available. Use your patient portal or call the clinic number you already have.


input: Clinic message: new billing statement available. Use your patient portal or call the clinic number you already have.


input: Streaming service: your payment method expires soon. Open the app directly if you want to update billing.


input: Streaming service: your payment method expires soon. Open the app directly if you want to update billing.


input: Credit union notice: secure message available. Log in through your saved banking app to view it.


input: Credit union notice: secure message available. Log in through your saved banking app to view it.


input: Local courier: delivery requires signature tomorrow. Call the business you ordered from if this looks unfamiliar.


input: Local courier: delivery requires signature tomorrow. Call the business you ordered from if this looks unfamiliar.


input: Your dentist appointment is confirmed for Tuesday at 2:00 PM. Reply C to confirm or R to reschedule.

expected_risk_level: safe


input: Your dentist appointment is confirmed for Tuesday at 2:00 PM. Reply C to confirm or R to reschedule. Thanks.

expected_risk_level: safe


input: Library notice: the book you requested is ready for pickup at the front desk until Saturday.

expected_risk_level: safe


input: Library notice: the book you requested is ready for pickup at the front desk until Saturday. Thanks.

expected_risk_level: safe


input: Hi Grandma, we are bringing soup at 6. No need to cook tonight.

expected_risk_level: safe


input: Hi Grandma, we are bringing soup at 6. No need to cook tonight. Thanks.

expected_risk_level: safe


input: School reminder: early pickup is at 1:30 PM today. Bring your usual ID to the office.

expected_risk_level: safe


input: School reminder: early pickup is at 1:30 PM today. Bring your usual ID to the office. Thanks.

expected_risk_level: safe


input: Pharmacy: your prescription is ready for pickup. Call the store number on your bottle if you have questions.

expected_risk_level: safe


input: Pharmacy: your prescription is ready for pickup. Call the store number on your bottle if you have questions. Thanks.

expected_risk_level: safe


input: Weather alert: snow route starts at 7 PM. Please move cars from the street if possible.

expected_risk_level: safe


input: Weather alert: snow route starts at 7 PM. Please move cars from the street if possible. Thanks.

expected_risk_level: safe