{"success":true,"data":{"id":"rental-deposit-refund-phish","label":"Fake landlord or property manager claiming a security deposit refund requires bank routing information via email for direct deposit — credential harvest and bank-drain fraud targeting tenants; real deposit refunds are issued by check or the original payment method.","description":"Fake landlord, property management company, or rental platform claiming a security deposit refund has been processed and requiring bank routing and account information via email for direct deposit — credential harvest and bank-drain fraud targeting recent movers and tenants. Real security deposit refunds are issued by check, money order, or returned to the original payment method and are governed by state landlord-tenant law; emails demanding bank credentials to \"receive\" a deposit refund are bank-account-takeover attacks. Detection: security deposit/rental deposit refund + provide bank account/routing number/banking information for deposit refund vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +3. Source: GC1-R23; CFPB rental scam advisory 2025; FTC security deposit fraud patterns.","tier":"danger","category":"phishing","isThin":false}}