{"success":true,"data":{"id":"fake-ring-doorbell-disconnection-membership-lure","label":"Fake Ring / Nest / Arlo doorbell disconnection + membership lure — email impersonates Ring, Nest, Arlo, Eufy, Wyze, or Blink, warns the device will be \"disconnected\" or cloud-storage / subscription will lapse, and directs to a fake portal to update payment. Inky documented subject \"Ring Video Doorbell Disconnection\"; Snopes Jul 2025 tracked opportunistic phish wave following Ring backend bug; Malwarebytes Jul 2025 + NordVPN 2025. Distinct from fake-smart-home-device-breach-lure (breach narrative)","description":"Email impersonating Ring, Nest, Arlo, Eufy, Wyze, or Blink warning that the recipient's smart-home camera or doorbell will be \"disconnected\" and cloud-recorded footage deleted unless the membership or subscription is renewed immediately through a payment update portal — which is a credential-harvesting or payment-card-skimming page. Inky documented the canonical subject line \"Ring Video Doorbell Disconnection\" in their initial disclosure; Snopes reported in July 2025 that a Ring backend bug triggered an opportunistic phishing wave imitating the outage notification; Malwarebytes July 2025 and Tom's Guide 2025 confirmed sustained Ring-impersonation campaigns; NordVPN 2025 published a Ring-phishing consumer guide. Real Ring/Nest renewal notices come from @ring.com / @nest.com / @google.com / @amazon.com with DKIM-authenticated links to the official account portal — they never request credit-card details via a third-party payment page. Distinct from `fake-smart-home-device-breach-lure` (breach/hack narrative, not disconnection/membership) and `fake-amazon-account-locked-lure` (Amazon retail account, not IoT subscription). Fires when IoT-doorbell brand combines with disconnection/lapse language and a payment-update CTA.","tier":"danger","category":"scam","isThin":false}}