Skip to main content
WarningOther

Fake PWA or app install prompt impersonating a bank or Microsoft security update

pwa-silent-install

What this tier means

Warning signal — bulk / marketing / mild spam. Contributes to the trash score but is not by itself sufficient.

How Gorganizer detects this

Fake Progressive Web App (PWA) install prompt impersonating a bank security update or Microsoft IT mandate. Attackers email victims urging them to "click to install" or "add to home screen" — the link triggers a PWA install that deploys a credential-harvesting fake bank or Microsoft 365 login with no app store review. The signal fires when: (1) an install CTA is present (click to install, add to home screen, one-click install) AND (2) brand-impersonation or security-mandate framing is present (banking app, Microsoft security update, organizational requirement) AND (3) the link does NOT point to a legitimate app store AND (4) no List-Unsubscribe header. Source: GC1 R13 council #3; Kaspersky PWA banking phish 2024; Cofense PWA enterprise Q1 2026.

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a warning-tier signal — bulk / marketing / mild spam. It contributes to the trash score but never triggers deletion on its own. Gorganizer requires multiple signals + a margin over the safety floor before any email is moved to trash.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started