Fake mortgage refi rate-lock lure — "lock in 5.8% before it disappears tonight" from non-lender; SSN/DOB/bank harvest via refi form (2024-2025 Fed rate-cut cycle phish targeting US homeowners)
fake-mortgage-refi-rate-lock-lure
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Fake mortgage refinance rate-lock email targeting US homeowners during Fed rate-cut cycles. Urgency framing ("Lock in 5.8% before it disappears tonight" / "refi rate expires in 48 hours") exploits real homeowner anxiety about rate timing. The refi-form link lands on an SSN / DOB / bank-account harvest page. Preys on 2024-2025 rate volatility — when real rate-cut cycles happen, legit refi offers DO arrive, and attackers ride the wave. Distinct from `fake-mortgage-loan-modification-scam` which targets HARDSHIP-modification refinancing rather than rate-timing refinancing. Fires when the body references mortgage refinance / refi / home loan rate AND contains rate-urgency language (lock in rate, rate expires, rates going up, limited-time offer, expires tonight). Excludes known mortgage lenders (wellsfargo.com, chase.com, bankofamerica.com, usbank.com, pnc.com, citi.com, capitalone.com, rocketmortgage.com, quickenloans.com, loandepot.com, amerisave.com, better.com, ally.com, flagstar.com), rate-comparison sites (nerdwallet.com, bankrate.com, lendingtree.com, zillow.com, redfin.com, realtor.com), and federal housing agencies (hud.gov, va.gov, fanniemae.com, freddiemac.com). Auto-classified as danger via the `-lure` suffix.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started