{"success":true,"data":{"id":"travel-tsa-precheck-renewal-phish","label":"Fake TSA PreCheck / Global Entry renewal requiring payment and SSN re-entry via a lookalike site — impersonating DHS / CBP / TSA.","description":"Fake TSA PreCheck / Global Entry renewal requiring payment and SSN re-entry via a lookalike site — impersonating DHS, CBP, or TSA. SACRED: 'known traveler' added to safety-keywords.ts to protect real renewal emails. The US government NEVER collects travel program renewal fees or SSNs via inbound email links — all legitimate TSA PreCheck and Global Entry renewal is done at ttp.cbp.dhs.gov or through approved providers (IDEMIA, Telos). Non-.gov sender with TSA PreCheck / known traveler renewal vocabulary is phishing. Detection: TSA PreCheck/Global Entry/known traveler vocabulary + renewal/SSN payment action + sender NOT on .gov + no In-Reply-To + no List-Unsubscribe. Trash score: +4. Source: GC1-R18; FTC TSA PreCheck advisory February 2024; DHS trusted traveler program alert.","tier":"danger","category":"phishing","isThin":false}}