{"success":true,"data":{"id":"bank-account-suspension-phish","label":"Fake bank claiming account has been temporarily suspended or locked due to suspicious activity and requiring credential verification within 24 hours to restore access — credential-harvest attack; real banks never request full login credential re-entry via cold email link outside their authenticated portal.","description":"Fake bank or credit union claiming the recipient's account has been temporarily suspended or locked due to suspicious activity, requiring credential verification within 24 hours via email link to restore access — high-confidence credential-harvest attack. Real banks communicate account holds and restrictions through their authenticated online banking portals and mobile apps; they never request full login credential re-entry via cold inbound email links under a 24-hour deadline. The 24-hour restore-or-permanent-suspension pressure is a consistent urgency pattern across all major bank phishing campaigns. Detection: bank account temporarily suspended/locked + verify credentials within 24 hours/restore bank access vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +5. Source: GC1-R25; APWG banking phishing report Q4 2025; FBI IC3 banking credential phishing advisory; FS-ISAC bank impersonation alert.","tier":"danger","category":"phishing","isThin":false}}