Taxonomy Reference
Version: 1.0
This document is auto-generated from the taxonomy definitions.
Scam Intent
INTENT.IMPOSTER
Imposter
Pretending to be a trusted entity
INTENT.INVESTMENT
Investment
Promises of financial returns
INTENT.ROMANCE
Romance
Emotional relationship for fraud
INTENT.EMPLOYMENT
Employment
Fake job or task-based fraud
INTENT.SHOPPING
Shopping
Fake goods or sellers
INTENT.TECH_SUPPORT
Tech Support
Fake tech assistance
INTENT.PRIZE
Prize
Fake winnings
INTENT.EXTORTION
Extortion
Threat-based coercion
INTENT.CHARITY
Charity
Fake disaster or cause appeals
Delivery Channel
CHANNEL.EMAIL
Communication via email
CHANNEL.SMS
SMS
Text messages or SMS
CHANNEL.CHAT
Chat
WhatsApp, Telegram, Signal, etc.
CHANNEL.SOCIAL
Social Media
Facebook, Instagram, Twitter, LinkedIn, etc.
CHANNEL.PHONE
Phone
Voice calls
CHANNEL.WEB
Web
Malicious websites or landing pages
Social Engineering Techniques
SE.URGENCY
Urgency
Time pressure, deadlines
SE.AUTHORITY
Authority
Government, bank, employer tone
SE.SCARCITY
Scarcity
Limited availability
SE.FEAR
Fear
Threats, loss, legal trouble
SE.RECIPROCITY
Reciprocity
Gifts, favors
SE.TRUST_BUILDING
Trust Building
Long-term rapport
SE.CONFUSION
Confusion
Overwhelming steps
Requested Actions
ACTION.SEND_MONEY
Send Money
Direct money transfer
ACTION.GIFT_CARDS
Gift Cards
Purchase and share gift card codes
ACTION.CRYPTO
Crypto
Send crypto to a wallet address
ACTION.CREDENTIALS
Credentials
Provide login details or passwords
ACTION.INSTALL
Install Software
Download and install apps or remote access tools
ACTION.CLICK_LINK
Click Link
Visit a specific URL
ACTION.PROVIDE_PII
Provide PII
Share SSN, ID, or other sensitive info
Claimed Personas
PERSONA.GOVERNMENT
Government
IRS, FBI, Police, etc.
PERSONA.BANK
Bank
Chase, Wells Fargo, PayPal, etc.
PERSONA.TECH
Tech Support
Microsoft, Apple, Amazon support
PERSONA.EMPLOYER
Employer
Recruiter, Boss, CEO
PERSONA.ROMANTIC
Romantic Partner
Boyfriend, Girlfriend, Match
PERSONA.MARKETPLACE
Marketplace User
Facebook Marketplace, Craigslist user
PERSONA.CHARITY
Charity
Red Cross, GoFundMe, etc.
Analytics Usage (Sprint 6)
The taxonomy codes above drive several TIFAP analytics views:
Sankey flow visualization
The Sankey chart maps Intent → Channel → Action flows. Each taxonomy code becomes a node; edge width represents case volume. Use the /analytics/trends endpoint with group_by=intent,channel,action to fetch flow data.
Heatmap
The taxonomy heatmap crosses Intent (rows) against Channel (columns) with cell intensity representing case count. The aggregation job pre-computes these cross-tabulations in campaign_stats.
Trend views
Time-series trend charts segment cases by any taxonomy axis (intent, channel, technique, action, persona). The /analytics/trends endpoint accepts a taxonomy_axis parameter to select the grouping dimension.
Campaign classification
Each campaign links to one or more taxonomy codes via the campaign_classifications join table. The campaign detail view renders the associated taxonomy nodes with drill-down to the governance taxonomy tree.
Last updated