“Regulatory warning framing focuses on fraud risk and deceptive practices, conveying caution without extreme alarm.”