Fake Character.ai Plus subscription suspended — AI companion/roleplay platform payment failed, character chats and character memory no longer active, roleplay access revoked due to billing failure phishing

Phishing emails impersonating Character.ai claiming the Plus subscription has been suspended, character chats are no longer active, or character memory and roleplay access are no longer available due to a billing failure — directing victims to update payment through a credential-harvesting portal. A novel AI companion attack category completely distinct from the existing ChatGPT/OpenAI signal. Key facts: (1) Character.ai has 20M+ daily active users with the Plus plan at $9.99/month providing faster response times, expanded character memory, and early access to new features — users form deep, often daily emotional bonds with their AI characters; a 'Character.ai Plus suspended, your character memories are no longer active' email triggers both financial urgency (recurring subscription) and emotional urgency (loss of the ongoing relationship and conversation history with the AI character); (2) The character memory dimension creates a unique urgency not present in other AI subscription phish: Character.ai Plus stores a persistent 'memory' of each character relationship — users have invested hundreds of hours building specific character personas, relationship dynamics, and story arcs; losing this memory is perceived as losing a relationship history, not just a service; this psychological dimension makes 'your character memories are at risk' an exceptionally powerful hook; (3) Character.ai's user demographics skew younger (55%+ of users are ages 18-24) — this age group has the least phishing awareness and the highest propensity to act quickly on account disruption notices for platforms they use daily; (4) The platform's vocabulary is completely distinct from all other AI services covered by existing signals: 'character chats', 'character conversations', 'character memory', 'roleplay access', 'AI character access' — none of these terms appear in ChatGPT/OpenAI/Gemini/Claude phishing templates, making this a genuinely novel signal category; (5) Character.ai credential compromise exposes emotionally sensitive data: the platform stores the complete history of all character conversations, often including personal disclosures users share with AI companions (mental health struggles, relationship problems, private thoughts) — users have strong motivation to protect this data from potential exposure; (6) The monthly billing model creates consistent attack surface: Character.ai sends monthly renewal notifications that users have seen, making a 'billing failed' email format highly credible. Warning signs: sender not character.ai or c.ai; genuine Character.ai billing at character.ai/account; character conversations and memory are never lost due to billing issues — this is the phishing tell.