“Uses urgent vocabulary like 'raised the alarm' and 'surge' to frame a security threat and fraudulent activity.”