{"success":true,"data":{"id":"property-deed-fraud-phish","label":"Fake county recorder or title company claiming a deed transfer has been recorded on the target property and requiring immediate credential click to protect it — deed fraud phishing for HELOC/mortgage fraud.","description":"Fake county recorder, title company, or property monitoring service claiming a deed transfer or lien has been recorded on the target's property and requiring immediate action via a credential link — deed fraud phishing used to facilitate HELOC theft, fraudulent mortgage origination, or property title transfer. Real deed change alerts come from official county recorders and established property monitoring services via postal mail; email-only deed alerts with click-to-protect CTAs are phishing attacks. Detection: property deed/quitclaim deed/deed transfer + county recorder/title alert + click to protect/view deed/action required vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +5. Source: GC1-R22; ALTA property deed fraud advisory; FBI IC3 real estate wire and deed fraud 2025.","tier":"danger","category":"phishing","isThin":false}}