{"success":true,"data":{"id":"subject-contains-phone-number","label":"Phone number in subject — tech-support scam / call-funnel pattern","description":"The subject line contains a call-to-action phone number in one of three high-confidence formats: a toll-free `1-800/888/877/866/855/844/833-XXX-XXXX`, a parenthesized `(XXX) XXX-XXXX`, or an international `+1 XXX XXX XXXX` pattern. Tech-support scam and fake-alert spam pattern: attacker uses a phone number in the subject to drive the victim into a voice-based funnel — a human operator is much more effective at extracting credentials and remote-desktop access than a phishing page. Legitimate transactional email essentially never puts a phone number in the subject line; companies use a body link or the word \"support\" instead. Detection explicitly requires dashes/parens/+ separators to avoid false-firing on invoice numbers, tracking numbers, order IDs, and bare digit sequences.","tier":"warning","category":"subject","isThin":false}}