- Request for sensitive information
- Apparently trustworthy but unusual domain
- Manufactured urgency (of the highest level too)