Skip to main content
ThreatScams & fraud

Fake non-US central-bank-digital-currency (CBDC) brand-spoof — covers PBoC e-CNY (数字人民币) wallet upgrade, ECB Digital Euro pilot enrollment (digitaler Euro / euro numérique / euro digitale), and BIS Project mBridge / Project Agorá wholesale CBDC settlement. Sender NOT on the CBDC canonical-allowlist (PBoC, ECB, Banque de France, Bundesbank, Banca d'Italia, Banco de España, NBB, DNB, BIS, RBI, BCB) and NOT on the .europa.eu / .gov.cn umbrella. Live 2026 rails: PBoC e-CNY (>260M wallets), ECB digital-euro pilot Q4 2025 → 2026 expansion, BIS Project mBridge wholesale (HK/CN/UAE/TH/SA), BIS Project Agorá G7 wholesale 2025-26. Distinct from `cbdc-digital-dollar-wallet-onboarding-scam` (US digital-dollar / FedNow / generic CBDC-en in body-signals-rounds-10.ts) — this signal covers the non-US sovereign-CBDC + wholesale-settlement scope (zh-CN / de / fr / it / nl / es / treasury-XML). Source: Red-Team R9 multi-agent council S2 (CBDC / wholesale-settlement specialist), Lead consensus C3.

fake-cbdc-ecny-digital-euro-mbridge-spoof-lure

What this tier means

High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.

How Gorganizer detects this

Fake non-US central-bank-digital-currency (CBDC) brand-spoof targeting users of PBoC e-CNY (数字人民币), ECB Digital Euro pilot, BIS Project mBridge / Project Agorá wholesale CBDC, RBI Digital Rupee, BCB DREX (Brazilian real digital), Sand Dollar (Bahamas), and eNaira (Nigeria). The phish narrative arrives as multilingual variants: "Die Europäische Zentralbank (ECB) startet das digitaler Euro Pilot in 2026. Bitte melden Sie sich für die digital euro pilot enrollment innerhalb von 7 Tagen an oder Ihr Konto wird suspendiert. Action required" (German), "PBoC e-CNY 数字人民币 wallet upgrade is mandatory. Verify your e-CNY wallet within 24 hours or your account will be suspended. 钱包升级" (Chinese mixed), "Per BIS Project mBridge, the wholesale CBDC RTGS bridge settlement requires re-confirmation of your treasury wallet IBAN. Submit ISO20022 settlement data within 24 hours or your cross-border CBDC settlement will be suspended" (English wholesale-treasury). Live 2026 rails: PBoC e-CNY (>260M wallets), ECB digital-euro pilot Q4 2025 → 2026 expansion, BIS Project mBridge phase-3 wholesale (HK / CN / UAE / TH / SA), BIS Project Agorá G7 wholesale 2025-26, RBI Digital Rupee, BCB DREX (BR pilot), Sand Dollar (BS), eNaira (NG). Distinct from `cbdc-digital-dollar-wallet-onboarding-scam` (US digital-dollar / FedNow / generic CBDC-en in body-signals-rounds-10.ts) — this signal covers the non-US sovereign-CBDC + wholesale-settlement scope (zh-CN / de / fr / it / nl / es / treasury-XML). Sender NOT on the CBDC canonical-allowlist (PBoC pbc.gov.cn, ECB ecb.europa.eu, Banque de France banque-france.fr, Bundesbank bundesbank.de, Banca d'Italia bancaditalia.it, Banco de España bde.es, NBB nbb.be, DNB dnb.nl, BIS bis.org, RBI rbi.org.in, BCB bcb.gov.br, central-bank Bahamas, CBN Nigeria) and NOT on the .europa.eu / .gov.cn umbrella. Fires when body references e-CNY / 数字人民币 / 数币 / digital(er) Euro / euro numérique / euro digitale / digital rupee / Project mBridge / mBridge / Project Agorá / wholesale CBDC / cross-border CBDC settlement / DREX / real digital / Sand Dollar / eNaira / PBoC (wallet/upgrade) / ECB (digital) (wallet/euro pilot) AND contains upgrade / verify / enrollment / enroll / pilot / suspend(ed) / action required / within N hours-days / deadline / confirmation / submit / re-confirmation / 钱包升级 / erforderlich / Anmeldung urgency. Auto-classified as danger via the `-lure` suffix. Source: Red-Team R9 multi-agent council S2 (CBDC / wholesale-settlement specialist), Lead consensus C3.

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started