{"success":true,"data":{"id":"body-contains-whatsapp-contact","label":"WhatsApp contact in body (move-off-email scam shape)","description":"Body contains a WhatsApp click-to-chat URL (`wa.me/`, `api.whatsapp.com/`, `chat.whatsapp.com/`) OR a WhatsApp mention within 60 characters of a phone-number digit cluster. Sibling of the Telegram handle signal — WhatsApp is the second most-common \"move the victim off email to encrypted chat\" redirect used by advance-fee fraud, romance scams, crypto investment scams, fake job offers, and recruitment fraud. Legitimate transactional senders essentially never push replies to WhatsApp; a few legitimate cases (courier delivery alternatives) come from trusted-sender-type domains and survive via the protective path. Weighted at +3.","tier":"warning","category":"body","isThin":false}}