{"success":true,"data":{"id":"immigration-visa-renewal-phish","label":"Fake USCIS / immigration renewal notice requiring fee payment or personal data entry via a non-.gov link — real immigration notices arrive by physical mail (Form I-797); the USCIS never initiates by email with non-.gov payment links.","description":"Fake USCIS or immigration authority renewal notice requiring fee payment or personal data entry via a non-.gov link. The US government communicates immigration notices primarily via physical mail (Form I-797) — inbound email claiming USCIS action required with a non-.gov payment or data-entry link is high-confidence fraud. Targets holders of visas, EADs, green cards, and work authorizations. Detection: USCIS/I-94/I-797/visa renewal/EAD vocabulary + pay fee/submit payment/update personal information action + href NOT on .gov domain + no In-Reply-To + not protected sender. Trash score: +5. Source: GC1-R19; USCIS official advisory on scam emails; FTC immigration scam report 2025.","tier":"danger","category":"phishing","isThin":false}}