{"success":true,"data":{"id":"crypto-exchange-kyc-reverification-phish","label":"Fake crypto exchange KYC re-verification requiring passport or government ID upload via a non-official domain — impersonating Coinbase / Binance / Kraken / Gemini.","description":"Fake KYC re-verification from Coinbase, Binance, Kraken, or Gemini requiring passport or government ID upload via a non-official domain. Real KYC re-verification is conducted through the exchange's authenticated app or website — NEVER via cold inbound email link demanding document upload. Account restricted + ID upload required from a non-official sender is a credential-harvest / document-theft lure. Detection: KYC/identity verification vocabulary + document upload required/account restricted action + exchange brand reference + sender NOT on official exchange domain allowlist (coinbase.com, binance.com, kraken.com, gemini.com) + no In-Reply-To + no List-Unsubscribe. Trash score: +4. Source: GC1-R18; FBI crypto exchange phishing advisory 2025; Chainalysis exchange impersonation report.","tier":"danger","category":"phishing","isThin":false}}