Fake gig-platform driver / dasher / shopper account deactivation phishing — non-official sender impersonates Uber, Lyft, DoorDash, Instacart, Grubhub, or Shipt threatening permanent deactivation of the recipient's driver or shopper account unless identity documents are verified or the account is re-activated through a fraudulent portal within a tight deadline

Phishing emails impersonating gig economy platforms (Uber, Lyft, DoorDash, Instacart, Grubhub, Shipt) threatening that the recipient's driver, Dasher, or shopper account has been suspended, restricted, or is at risk of permanent deactivation — unless identity documents are uploaded or the account is re-activated through a fraudulent verification portal within a tight deadline (24–72 hours). Gig workers depend on these platforms for their primary or supplemental income, making account deactivation threats extremely high-anxiety and high-compliance lures: the fear of losing income creates urgency that overrides skepticism. Key facts: (1) FBI IC3 2024: gig platform impersonation is a flagged growing vector; 73+ million Americans participate in the gig economy, making the target pool vast; (2) Real Uber, Lyft, and DoorDash communications about account issues come from official domains (uber.com, lyft.com, doordash.com) via authenticated bulk mail systems with List-Unsubscribe headers and typically reference specific policy violations — not generic "compliance reviews"; (3) Legitimate gig platforms handle identity verification through their apps using Persona, Onfido, or similar identity-verification SDK integrations — never via unsolicited email portals; (4) These phishing portals harvest driver's license uploads and personal data, enabling full identity theft. Warning signs: email from any domain other than the official platform domain, "suspended pending verification" with no prior warning, deadline urgency ("permanently deactivated in 48 hours"), link to an external portal not on uber.com/lyft.com/doordash.com.