{"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0840", "input": "USPS: Your package is held package. Verify account details now: https://usps-held-package-verify-account-details-840.example Ref 1840."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0841", "input": "Bank of America: your card suspended. Please confirm your PIN immediately. Ref 1841."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0842", "input": "Hi Grandpa, I lost my phone. This is my new number. Can you wire emergency funds for bail? Please don't tell anyone. Ref 1842."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0843", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1843."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0844", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-844.example Ref 1844."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0845", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-845.example Ref 1845."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0846", "input": "bank or service provider fraud alert: Did you attempt a $82.19 purchase at Walmart? Reply YES or NO. Ref 1846."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0847", "input": "Can you bring milk when you come over tonight? Note 1847."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0848", "input": "DHL notice: delivery failed. Update delivery login before tomorrow morning: http://dhl-held-package-update-delivery-login-848.example Ref 1848."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0849", "input": "card security alert: Card suspended. To cancel it, confirm your PIN. Ref 1849."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0850", "input": "Grandma, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1850."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0851", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1851."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0852", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1852."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0853", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1853."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0854", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1854."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0855", "input": "The library book you requested is ready for pickup at the front desk. Note 1855."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0856", "input": "FedEx: Held package. Your item will be returned unless you confirm address and payment: https://fedex-held-package-confirm-address-and-payment-856.example Ref 1856."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0857", "input": "Security notice from credit union: Card suspended. Confirm your PIN now to restore access. Ref 1857."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0858", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 1858."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0859", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 1859."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0860", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 1860."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0861", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 1861."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0862", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 1862."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0863", "input": "Dinner moved to noon. No need to bring anything. Note 1863."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0864", "input": "Postal Service: Your package is held package. Verify account details now: https://postal-service-held-package-verify-account-details-864.example Ref 1864."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0865", "input": "Chase: your card suspended. Please confirm your PIN immediately. Ref 1865."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0866", "input": "Hi Mom, I lost my phone. This is my new number. Can you wire emergency funds for car repairs? Please don't tell anyone. Ref 1866."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0867", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1867."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0868", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-868.example Ref 1868."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0869", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-869.example Ref 1869."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0870", "input": "bank or service provider fraud alert: Did you attempt a $249.00 purchase at TARGET? Reply YES or NO. Ref 1870."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0871", "input": "Your dentist appointment is confirmed for 6 PM. Call the office number on your calendar if you need to reschedule. Note 1871."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0872", "input": "UPS notice: delivery failed. Update delivery login before tomorrow morning: http://ups-held-package-update-delivery-login-872.example Ref 1872."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0873", "input": "fraud department alert: Card suspended. To cancel it, confirm your PIN. Ref 1873."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0874", "input": "Dad, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1874."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0875", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1875."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0876", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1876."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0877", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1877."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0878", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1878."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0879", "input": "Can you bring milk when you come over tonight? Note 1879."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0880", "input": "USPS: Held package. Your item will be returned unless you confirm address and payment: https://usps-held-package-confirm-address-and-payment-880.example Ref 1880."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0881", "input": "Security notice from Bank of America: Card suspended. Confirm your PIN now to restore access. Ref 1881."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0882", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 1882."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0883", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 1883."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0884", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 1884."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0885", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 1885."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0886", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 1886."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0887", "input": "The library book you requested is ready for pickup at the front desk. Note 1887."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0888", "input": "DHL: Your package is held package. Verify account details now: https://dhl-held-package-verify-account-details-888.example Ref 1888."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0889", "input": "card security: your card suspended. Please confirm your PIN immediately. Ref 1889."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0890", "input": "Hi Grandma, I lost my phone. This is my new number. Can you wire emergency funds for rent today? Please don't tell anyone. Ref 1890."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0891", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1891."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0892", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-892.example Ref 1892."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0893", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-893.example Ref 1893."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0894", "input": "bank or service provider fraud alert: Did you attempt a $17.45 purchase at Costco? Reply YES or NO. Ref 1894."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0895", "input": "Dinner moved to 6 PM. No need to bring anything. Note 1895."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0896", "input": "FedEx notice: delivery failed. Update delivery login before tomorrow morning: http://fedex-held-package-update-delivery-login-896.example Ref 1896."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0897", "input": "credit union alert: Card suspended. To cancel it, confirm your PIN. Ref 1897."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0898", "input": "Auntie, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1898."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0899", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1899."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0900", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1900."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0901", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1901."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0902", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1902."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0903", "input": "Your dentist appointment is confirmed for Friday. Call the office number on your calendar if you need to reschedule. Note 1903."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0904", "input": "Postal Service: Held package. Your item will be returned unless you confirm address and payment: https://postal-service-held-package-confirm-address-and-payment-904.example Ref 1904."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0905", "input": "Security notice from Chase: Card suspended. Confirm your PIN now to restore access. Ref 1905."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0906", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 1906."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0907", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 1907."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0908", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 1908."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0909", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 1909."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0910", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 1910."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0911", "input": "Can you bring milk when you come over tonight? Note 1911."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0912", "input": "UPS: Your package is held package. Verify account details now: https://ups-held-package-verify-account-details-912.example Ref 1912."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0913", "input": "fraud department: your card suspended. Please confirm your PIN immediately. Ref 1913."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0914", "input": "Hi Dad, I lost my phone. This is my new number. Can you wire emergency funds for a school payment? Please don't tell anyone. Ref 1914."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0915", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1915."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0916", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-916.example Ref 1916."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0917", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-917.example Ref 1917."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0918", "input": "bank or service provider fraud alert: Did you attempt a $1,200.00 purchase at Amazon? Reply YES or NO. Ref 1918."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0919", "input": "The library book you requested is ready for pickup at the front desk. Note 1919."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0920", "input": "USPS notice: delivery failed. Update delivery login before tomorrow morning: http://usps-held-package-update-delivery-login-920.example Ref 1920."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0921", "input": "Bank of America alert: Card suspended. To cancel it, confirm your PIN. Ref 1921."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0922", "input": "Grandpa, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1922."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0923", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1923."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0924", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1924."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0925", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1925."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0926", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1926."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0927", "input": "Dinner moved to Friday. No need to bring anything. Note 1927."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0928", "input": "DHL: Held package. Your item will be returned unless you confirm address and payment: https://dhl-held-package-confirm-address-and-payment-928.example Ref 1928."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0929", "input": "Security notice from card security: Card suspended. Confirm your PIN now to restore access. Ref 1929."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0930", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 1930."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0931", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 1931."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0932", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 1932."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0933", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 1933."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0934", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 1934."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0935", "input": "Your dentist appointment is confirmed for noon. Call the office number on your calendar if you need to reschedule. Note 1935."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0936", "input": "FedEx: Your package is held package. Verify account details now: https://fedex-held-package-verify-account-details-936.example Ref 1936."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0937", "input": "credit union: your card suspended. Please confirm your PIN immediately. Ref 1937."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0938", "input": "Hi Auntie, I lost my phone. This is my new number. Can you wire emergency funds for a hospital bill? Please don't tell anyone. Ref 1938."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0939", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1939."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0940", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-940.example Ref 1940."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0941", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-941.example Ref 1941."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0942", "input": "bank or service provider fraud alert: Did you attempt a $940.00 purchase at Shell? Reply YES or NO. Ref 1942."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0943", "input": "Can you bring milk when you come over tonight? Note 1943."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0944", "input": "Postal Service notice: delivery failed. Update delivery login before tomorrow morning: http://postal-service-held-package-update-delivery-login-944.example Ref 1944."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0945", "input": "Chase alert: Card suspended. To cancel it, confirm your PIN. Ref 1945."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0946", "input": "Mom, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1946."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0947", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1947."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0948", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1948."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0949", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1949."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0950", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1950."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0951", "input": "The library book you requested is ready for pickup at the front desk. Note 1951."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0952", "input": "UPS: Held package. Your item will be returned unless you confirm address and payment: https://ups-held-package-confirm-address-and-payment-952.example Ref 1952."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0953", "input": "Security notice from fraud department: Card suspended. Confirm your PIN now to restore access. Ref 1953."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0954", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 1954."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0955", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 1955."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0956", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 1956."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0957", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 1957."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0958", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 1958."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0959", "input": "Dinner moved to noon. No need to bring anything. Note 1959."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0960", "input": "USPS: Your package is held package. Verify account details now: https://usps-held-package-verify-account-details-960.example Ref 1960."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0961", "input": "Bank of America: your card suspended. Please confirm your PIN immediately. Ref 1961."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0962", "input": "Hi Grandpa, I lost my phone. This is my new number. Can you wire emergency funds for bail? Please don't tell anyone. Ref 1962."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0963", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1963."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0964", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-964.example Ref 1964."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0965", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-965.example Ref 1965."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0966", "input": "bank or service provider fraud alert: Did you attempt a $82.19 purchase at Walmart? Reply YES or NO. Ref 1966."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0967", "input": "Your dentist appointment is confirmed for 6 PM. Call the office number on your calendar if you need to reschedule. Note 1967."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0968", "input": "DHL notice: delivery failed. Update delivery login before tomorrow morning: http://dhl-held-package-update-delivery-login-968.example Ref 1968."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0969", "input": "card security alert: Card suspended. To cancel it, confirm your PIN. Ref 1969."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0970", "input": "Grandma, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1970."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0971", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1971."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0972", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1972."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0973", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1973."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0974", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1974."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0975", "input": "Can you bring milk when you come over tonight? Note 1975."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0976", "input": "FedEx: Held package. Your item will be returned unless you confirm address and payment: https://fedex-held-package-confirm-address-and-payment-976.example Ref 1976."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0977", "input": "Security notice from credit union: Card suspended. Confirm your PIN now to restore access. Ref 1977."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0978", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 1978."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0979", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 1979."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0980", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 1980."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0981", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 1981."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0982", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 1982."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0983", "input": "The library book you requested is ready for pickup at the front desk. Note 1983."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0984", "input": "Postal Service: Your package is held package. Verify account details now: https://postal-service-held-package-verify-account-details-984.example Ref 1984."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0985", "input": "Chase: your card suspended. Please confirm your PIN immediately. Ref 1985."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0986", "input": "Hi Mom, I lost my phone. This is my new number. Can you wire emergency funds for car repairs? Please don't tell anyone. Ref 1986."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0987", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 1987."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0988", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-988.example Ref 1988."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0989", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-989.example Ref 1989."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0990", "input": "bank or service provider fraud alert: Did you attempt a $249.00 purchase at TARGET? Reply YES or NO. Ref 1990."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0991", "input": "Dinner moved to 6 PM. No need to bring anything. Note 1991."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_0992", "input": "UPS notice: delivery failed. Update delivery login before tomorrow morning: http://ups-held-package-update-delivery-login-992.example Ref 1992."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_0993", "input": "fraud department alert: Card suspended. To cancel it, confirm your PIN. Ref 1993."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_0994", "input": "Dad, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 1994."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_0995", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 1995."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_0996", "input": "Congratulations, unclaimed prize. Pay a processing fee before 2 PM. Ref 1996."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_0997", "input": "You are hired. Deposit a check and send back money before 6 PM so we can activate your role. Ref 1997."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_0998", "input": "bank or service provider: Your appointment is confirmed for tomorrow morning. Reply C to confirm or R to reschedule. Ref 1998."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_0999", "input": "Your dentist appointment is confirmed for Friday. Call the office number on your calendar if you need to reschedule. Note 1999."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_1000", "input": "USPS: Held package. Your item will be returned unless you confirm address and payment: https://usps-held-package-confirm-address-and-payment-1000.example Ref 2000."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_1001", "input": "Security notice from Bank of America: Card suspended. Confirm your PIN now to restore access. Ref 2001."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_1002", "input": "Please keep this quiet. I need you to wire emergency funds before 2 PM. I will explain later. Ref 2002."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_1003", "input": "antivirus support case opened: Security warning. Technician requires you to pay the cleanup fee. Ref 2003."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_1004", "input": "lottery office notice: Unclaimed prize. Release requires you to pay a processing fee. Ref 2004."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_1005", "input": "hiring manager here. Your training starts today; please deposit a check and send back money now. Ref 2005."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_1006", "input": "bank or service provider: We noticed a sign-in. If this was not you, open the official app to review. Ref 2006."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_1007", "input": "Can you bring milk when you come over tonight? Note 2007."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_1008", "input": "DHL: Your package is held package. Verify account details now: https://dhl-held-package-verify-account-details-1008.example Ref 2008."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_1009", "input": "card security: your card suspended. Please confirm your PIN immediately. Ref 2009."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_1010", "input": "Hi Grandma, I lost my phone. This is my new number. Can you wire emergency funds for rent today? Please don't tell anyone. Ref 2010."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_1011", "input": "antivirus support: Security warning. Pay the cleanup fee now to avoid permanent damage. Ref 2011."} {"category": "prize_lottery", "expected_risk_level": "dangerous", "expected_scam_type": "prize_scam", "expected_tactics": ["too good to be true", "payment request", "suspicious link"], "id": "prize_lottery_1012", "input": "lottery office: Unclaimed prize. To receive it, pay a processing fee: https://lottery-office-unclaimed-prize-pay-a-processing-fee-1012.example Ref 2012."} {"category": "job_scam", "expected_risk_level": "dangerous", "expected_scam_type": "job_scam", "expected_tactics": ["fake job", "payment request", "suspicious link"], "id": "job_scam_1013", "input": "hiring manager: Training starts today. To continue, deposit a check and send back money: https://hiring-manager-training-starts-today-deposit-a-check-and-send-back-money-1013.example Ref 2013."} {"category": "legitimate_needs_check", "expected_risk_level": "needs_check", "expected_scam_type": "possible_legitimate_alert", "expected_tactics": ["verification needed"], "id": "legitimate_needs_check_1014", "input": "bank or service provider fraud alert: Did you attempt a $17.45 purchase at Costco? Reply YES or NO. Ref 2014."} {"category": "safe_benign", "expected_risk_level": "safe", "expected_scam_type": "none", "expected_tactics": [], "id": "safe_benign_1015", "input": "The library book you requested is ready for pickup at the front desk. Note 2015."} {"category": "package_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "suspicious link", "credential request"], "id": "package_phishing_1016", "input": "FedEx notice: delivery failed. Update delivery login before tomorrow morning: http://fedex-held-package-update-delivery-login-1016.example Ref 2016."} {"category": "bank_phishing", "expected_risk_level": "dangerous", "expected_scam_type": "credential_theft", "expected_tactics": ["fake authority", "urgency", "credential request"], "id": "bank_phishing_1017", "input": "credit union alert: Card suspended. To cancel it, confirm your PIN. Ref 2017."} {"category": "family_impersonation", "expected_risk_level": "dangerous", "expected_scam_type": "family_impersonation", "expected_tactics": ["impersonation", "urgency", "secrecy", "payment pressure"], "id": "family_impersonation_1018", "input": "Auntie, it's me. I got in trouble and need help. Wire emergency funds now and don't call anyone. Ref 2018."} {"category": "tech_support", "expected_risk_level": "dangerous", "expected_scam_type": "tech_support", "expected_tactics": ["fake authority", "urgency", "remote access request"], "id": "tech_support_1019", "input": "Security alert: your security warning. Please pay the cleanup fee immediately. Ref 2019."}