{"success":true,"data":{"id":"fake-gig-worker-deactivation-lure","label":"Fake DoorDash / Uber / Lyft / Instacart / Grubhub driver-deactivation lure — \"account deactivated, background recheck, payout frozen, verify within 24 hours or lose earnings\" targeting 8M+ DoorDash, 5M+ Uber, 2.5M+ Lyft, 600K+ Instacart drivers; driver-license photo + SSN + bank-routing harvest → payout redirect + ghost-driver identity theft ($100-400/bundle on dark markets 2024-2025)","description":"Fake \"your DoorDash / Uber / Lyft / Instacart / Grubhub driver account has been deactivated due to a customer complaint or policy violation — verify your identity within 24 hours or lose earnings access\" email targeting 8M+ DoorDash dashers, 5M+ Uber drivers, 2.5M+ Lyft drivers, and 600K+ Instacart shoppers in the US. Driver deactivation equals loss of primary income, so gig workers have a high-urgency \"must-respond-or-lose-income\" mental model that attackers exploit. Harvests driver-license photo + SSN + bank routing + Social Security or similar ID. Post-compromise attackers: (1) redirect driver payout to attacker bank account; (2) steal the driver identity for bogus \"ghost driver\" accounts on the same or other platforms; (3) sell the full KYC bundle ($100-400 per complete gig-driver identity per 2024-2025 Flashpoint dark-market pricing reports). The lure converts because gig platforms DO routinely deactivate accounts for customer complaints, documentation lapses, and background-check rechecks — drivers are conditioned to respond fast. FTC Consumer Sentinel 2024 data shows gig-worker-targeted phishing rising 47% year-over-year. Fires when body references DoorDash / Dasher / Uber / Lyft / Instacart / Grubhub / driver account / gig driver / Dasher Central / driver payout AND contains deactivation / customer-complaint / background-recheck / payout-frozen / verification urgency. Excludes doordash.com, dasher.com, uber.com, uber.us, lyft.com, lyftmail.com, instacart.com, instacart-support.com, grubhub.com, seamless.com, postmates.com. Auto-classified as danger via the `-lure` suffix.","tier":"danger","category":"scam","isThin":false}}