{"success":true,"data":{"id":"fake-mortgage-refi-rate-lock-lure","label":"Fake mortgage refi rate-lock lure — \"lock in 5.8% before it disappears tonight\" from non-lender; SSN/DOB/bank harvest via refi form (2024-2025 Fed rate-cut cycle phish targeting US homeowners)","description":"Fake mortgage refinance rate-lock email targeting US homeowners during Fed rate-cut cycles. Urgency framing (\"Lock in 5.8% before it disappears tonight\" / \"refi rate expires in 48 hours\") exploits real homeowner anxiety about rate timing. The refi-form link lands on an SSN / DOB / bank-account harvest page. Preys on 2024-2025 rate volatility — when real rate-cut cycles happen, legit refi offers DO arrive, and attackers ride the wave. Distinct from `fake-mortgage-loan-modification-scam` which targets HARDSHIP-modification refinancing rather than rate-timing refinancing. Fires when the body references mortgage refinance / refi / home loan rate AND contains rate-urgency language (lock in rate, rate expires, rates going up, limited-time offer, expires tonight). Excludes known mortgage lenders (wellsfargo.com, chase.com, bankofamerica.com, usbank.com, pnc.com, citi.com, capitalone.com, rocketmortgage.com, quickenloans.com, loandepot.com, amerisave.com, better.com, ally.com, flagstar.com), rate-comparison sites (nerdwallet.com, bankrate.com, lendingtree.com, zillow.com, redfin.com, realtor.com), and federal housing agencies (hud.gov, va.gov, fanniemae.com, freddiemac.com). Auto-classified as danger via the `-lure` suffix.","tier":"danger","category":"scam","isThin":false}}