You're the analyst on duty. Quarantined messages are stacking up and every one needs a call: deliver it, or block it. Users hate false positives. The CFO hates wire fraud more. Every shift draws a fresh queue from a pool of 100 real-world patterns — no two runs are the same.
3 strikesMisclassify three messages and your shift ends. Letting phish through hurts the same as blocking payroll.
Read the headersCheck sender domains, Reply-To mismatches, and hover every link — the status bar shows the real destination.
Speed paysEach ticket has a countdown. Faster correct calls earn a time bonus; streaks multiply your score.