type.inbound
and sender.email.email == "noreply@paypal.com"
and strings.icontains(subject.base,
"Creation of your PayPal Manager user account"
)
and any(ml.nlu_classifier(body.current_thread.text).intents,
.name in ("callback_scam", "cred_theft") and .confidence != "low"
)
Playground
Test against your own EMLs or sample data.