Fake DoorDash / Uber / Lyft / Instacart / Grubhub driver-deactivation lure — "account deactivated, background recheck, payout frozen, verify within 24 hours or lose earnings" targeting 8M+ DoorDash, 5M+ Uber, 2.5M+ Lyft, 600K+ Instacart drivers; driver-license photo + SSN + bank-routing harvest → payout redirect + ghost-driver identity theft ($100-400/bundle on dark markets 2024-2025)
fake-gig-worker-deactivation-lure
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Fake "your DoorDash / Uber / Lyft / Instacart / Grubhub driver account has been deactivated due to a customer complaint or policy violation — verify your identity within 24 hours or lose earnings access" email targeting 8M+ DoorDash dashers, 5M+ Uber drivers, 2.5M+ Lyft drivers, and 600K+ Instacart shoppers in the US. Driver deactivation equals loss of primary income, so gig workers have a high-urgency "must-respond-or-lose-income" mental model that attackers exploit. Harvests driver-license photo + SSN + bank routing + Social Security or similar ID. Post-compromise attackers: (1) redirect driver payout to attacker bank account; (2) steal the driver identity for bogus "ghost driver" accounts on the same or other platforms; (3) sell the full KYC bundle ($100-400 per complete gig-driver identity per 2024-2025 Flashpoint dark-market pricing reports). The lure converts because gig platforms DO routinely deactivate accounts for customer complaints, documentation lapses, and background-check rechecks — drivers are conditioned to respond fast. FTC Consumer Sentinel 2024 data shows gig-worker-targeted phishing rising 47% year-over-year. Fires when body references DoorDash / Dasher / Uber / Lyft / Instacart / Grubhub / driver account / gig driver / Dasher Central / driver payout AND contains deactivation / customer-complaint / background-recheck / payout-frozen / verification urgency. Excludes doordash.com, dasher.com, uber.com, uber.us, lyft.com, lyftmail.com, instacart.com, instacart-support.com, grubhub.com, seamless.com, postmates.com. Auto-classified as danger via the `-lure` suffix.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started