Fake state licensing board or professional authority (bar association, medical board, nursing board, CPA board) claiming the target's professional license is flagged for non-compliance and will be suspended unless a renewal fee is paid via email link — credential-harvest and advance-fee fraud; real licensing boards communicate through authenticated portals and certified mail.
professional-license-renewal-authority-phish
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Fake state licensing board or professional regulatory authority (impersonating bar associations, state medical boards, nursing boards, engineering boards, real estate commissions, or CPA/accountancy boards) claiming the target's professional license has been flagged for non-compliance or is about to expire and requiring payment of a renewal fee or completion of continuing education hours via email link to avoid immediate license suspension or revocation — credential-harvest and advance-fee fraud targeting licensed professionals. Real state licensing board renewal notices come from the official board via authenticated online portals and USPS mail; cold emails claiming "your license is flagged for non-compliance — pay renewal fee via link or your license will be suspended" are attacks exploiting professional anxiety about livelihood-threatening license loss. This extends the existing professional-license-renewal-phish (batch 13 — generic renewal narrative) with a more specific "authority flagging compliance violation" pretext that adds disciplinary urgency. Detection: licensing board/state board/professional board + license expiring/suspended/flagged for non-compliance + renewal fee or continuing education via link vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +4. Source: GC1-R29; FTC occupational license fraud advisory; NCSL professional licensing board impersonation report; CISA government credential-harvest patterns 2025.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started