{"success":true,"data":{"id":"fake-data-breach-identity-protection-phish","label":"Fake data breach identity protection phish — your credentials/SSN found on dark web + click to see breach report + pay for identity theft protection / dark web monitoring subscription","description":"Fake data breach notification combined with identity theft protection upsell — cold email claiming the victim's email, password, SSN, credit card, or personal information was \"found on the dark web\" following a data breach, then directing them to click a link to see the \"breach report\" and pay for an \"identity protection plan,\" \"dark web monitoring,\" or \"identity theft insurance.\" The link leads to a phishing page or a fraudulent subscription service. Legitimate breach alerts come from companies the victim has an existing relationship with (their bank, credit bureau membership, or HIBP) and do not cold-contact with paid service upsells. FTC 2024: identity theft protection fraud caused $47M in reported losses; dark web removal services are specifically called out by the FTC as largely fraudulent.","tier":"danger","category":"phishing","isThin":false}}