Fake VA or veterans benefit notice claiming VA benefits require reapplication and asking the target to verify their service record via email link to continue receiving payments — credential-harvest and advance-fee fraud targeting veterans; real VA benefit changes are communicated through va.gov or postal mail, never cold email service-record verification links.
veterans-benefit-reapplication-phish
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Fake VA (Department of Veterans Affairs) or veterans benefit administration notice claiming the recipient's VA benefit requires reapplication and asking them to verify their service record via email link to continue receiving benefit payments — credential-harvest and advance-fee fraud targeting veterans. Real VA benefit changes, reapplication requirements, and payment updates are communicated through the authenticated VA.gov portal or via postal mail; cold emails demanding service record verification via a link to "continue receiving" VA payments are attacks targeting the veteran population. Distinct from social-security-benefit-phish (SSA/Social Security Administration benefits) and government-grant-stimulus-phish (generic government payment narrative) — this targets the VA / veterans-specific benefit reapplication / service record verification pretext. Detection: VA/veterans/veterans benefit/veterans administration benefit + reapplication/reapply/verify service record/continue receiving payments vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +4. Source: GC1-R26; VA OIG veterans benefit fraud advisory; FTC veterans impostor scam report 2025; FBI IC3 veterans-targeted fraud alert.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started