{"success":true,"data":{"id":"id-dana-ovo-gopay-confirm-lure","label":"Fake DANA / OVO / GoPay payment-confirmation phishing — Indonesian e-wallet brand keywords (dana / ovo / gopay / gojek pay) + konfirmasi pembayaran / verifikasi transaksi narrative + off-brand href (not dana.id / ovo.id / gojek.com / gopay.co.id). DANA 130M+ users, OVO 115M+, GoPay 270M+ across Indonesia. Canonical senders handled by BRAND_TRUST_MAP. Source: Red-Team R8 multi-agent council C3 (ID payment-rail specialist).","description":"Fake DANA / OVO / GoPay payment-confirmation phishing targeting Indonesian e-wallet users. The phish narrative arrives as: \"DANA: Konfirmasi pembayaran diperlukan — klik tautan berikut untuk memverifikasi transaksi Anda\" (DANA: payment confirmation required — click the following link to verify your transaction), or \"GoPay: Transaksi mencurigakan terdeteksi — konfirmasi sekarang untuk mencegah pemblokiran akun\" (GoPay: suspicious transaction detected — confirm now to prevent account blocking). DANA has 130M+ users, OVO 115M+, GoPay (embedded in Gojek) 270M+ across Indonesia. Detection: dana / dompet dana / ovo / gopay / gojek pay / shopeepay / linkaja brand AND konfirmasi pembayaran / konfirmasi transaksi / verifikasi narrative AND off-brand href (not dana.id, ovo.id, gojek.com, gopay.co.id, shopeepay.com, linkaja.id). Source: Red-Team R8 multi-agent council C3 (ID payment-rail specialist).","tier":"danger","category":"other","isThin":false}}