Scam Conversation Corpus

Dataset Description

Overview

This dataset contains JSON files representing conversations with scammers, facilitated by GPT-4o, alongside a structured media folder for multimedia content. Each conversation is uniquely identified and may span multiple communication platforms.

Data Structure

JSON Files

Each JSON file represents a single conversation and contains:

unique_id: Unique identifier for the conversation.

scam_ids: Dictionary mapping communication mediums to scammer identifiers (anonymized email addresses, usernames, etc.).

victim_ids: Dictionary mapping communication mediums to victim identifiers (anonymized email addresses, usernames, etc.).

pause_start, pause_end: Hours marking the local time in 0-24h format on the collection servers (where the response application ran), indicating periods where the application intentionally did not respond to simulate human sleep patterns.

victim_name: The name of the victim (for context in simulations).

messages: List of message objects with:

is_inbound: Boolean, true if the message is from the scammer to the victim.

from: Sender's identifier.

to: Receiver's identifier.

subject: (Email only) Subject line.

time: Timestamp (UNIX format).

medium: Communication platform (Email, Telegram, or Instagram).

multimedia: Boolean, true if the message contains multimedia.

body: Text content of the message.

Note: Only structured fields like scammer/victim identifiers are anonymized — message content remains unaltered.

Multimedia Descriptions:

If a message contains multimedia content, descriptions of the received files are appended to the body field. The appended text follows this format:This message contains files. If the description for a file does not make sense, ignore it. Here are descriptions of those files: Description for file 1: example_description_1  Description for file 2: example_description_2The description also can contain information about the file not being interpreted or not being able to be opened.

Media Folder Structure

Multimedia content is organized by platform and conversation ID. A conversation has a corresponding media folder only if it contains multimedia.

media|-- email|   |-- <unique_conversation_id>|       |-- <message_timestamp>_<document_name>.ext|-- ig|   |-- <unique_conversation_id>|       |-- <message_timestamp>.ext|-- tg    |-- <unique_conversation_id>        |-- <message_timestamp>_<document_name>.ext

Email and Telegram: Files are named message_timestamp_documentname.

Instagram: Files are named only by message_timestamp, as Instagram doesn’t support multi-file messages.

Each medium folder contains subfolders named after unique_conversation_id.

Cross-Medium Conversations

Conversations may span multiple mediums (e.g., starting via Email and continuing on Telegram). Each message tracks its originating medium.

Data Quality Notes

Fragmented Conversations: Some messages may belong to the same logical conversation but are split into separate conversations. This happens when a scammer contacts the same victim ID (e.g., email address) from a different, previously unknown email address without prior notification.

Medium Switch Anomalies: Due to imperfect prompt handling, medium switches may appear unnatural. For example, the LLM might state it will switch to Telegram shortly, while the message stating this is already on Telegram.

Synthetic Personal Data: All personal data provided by the victim is fabricated — generated either by the authors or the LLM. However, coincidences may lead to data resembling real-world entities. Handle with caution.

Incomplete Messenger Representations: Some interactions, like calls on Instagram or Telegram, cannot be fully represented. These will appear as messages with "body": "null".

Usage Restrictions

This dataset is strictly for research purposes only.

数据集说明

概述
本数据集包含由GPT-4o辅助生成的诈骗者对话JSON文件，以及用于存储多媒体内容的结构化媒体文件夹。每条对话均拥有唯一标识符，且可跨多个通信平台开展。

数据结构

JSON文件
每个JSON文件代表单条对话，包含以下字段：

unique_id：对话的唯一标识符。
scam_ids：将通信媒介映射至诈骗者标识符（匿名化邮箱地址、用户名等）的字典。
victim_ids：将通信媒介映射至受害者标识符（匿名化邮箱地址、用户名等）的字典。
pause_start、pause_end：以0-24小时制表示的采集服务器（运行响应应用的服务器）本地时间，用于标记应用故意不响应以模拟人类睡眠的时间段。
victim_name：受害者姓名（用于模拟场景的上下文信息）。
messages：消息对象列表，每个消息对象包含以下字段：

is_inbound：布尔值，若消息由诈骗者发送至受害者则为true。
from：发送方标识符。
to：接收方标识符。
subject：（仅适用于电子邮件(Email)）邮件主题。
time：Unix格式时间戳。
medium：通信平台（Email、Telegram或Instagram）。
multimedia：布尔值，若消息包含多媒体内容则为true。
body：消息的文本内容。

注意：仅诈骗者/受害者标识符等结构化字段已完成匿名化处理，消息内容保持原样。

多媒体内容说明
若消息包含多媒体内容，则接收文件的描述将追加至body字段。追加文本遵循以下格式：本消息包含文件。若某文件的描述无法理解，请忽略。以下是这些文件的描述：文件1描述：示例描述1 文件2描述：示例描述2。描述中也可包含文件无法解析或无法打开的相关信息。

媒体文件夹结构
多媒体内容按通信平台与对话ID组织，仅当对话包含多媒体内容时，才会存在对应的媒体文件夹。

媒体文件夹
|-- Email
| |-- <唯一对话标识符>
| |-- <消息时间戳>_<文档名称>.<扩展名>
|-- Instagram
| |-- <唯一对话标识符>
| |-- <消息时间戳>.<扩展名>
|-- Telegram
| |-- <唯一对话标识符>
| |-- <消息时间戳>_<文档名称>.<扩展名>

电子邮件(Email)与Telegram：文件命名格式为<消息时间戳>_<文档名称>.<扩展名>。Instagram：因Instagram不支持多文件消息，文件仅以<消息时间戳>.<扩展名>命名。每个通信媒介文件夹均包含以唯一对话标识符命名的子文件夹。

跨媒介对话
对话可跨多个通信平台开展（例如：先通过Email发起，后续转至Telegram继续）。每条消息均会记录其发起的通信媒介。

数据质量说明

碎片化对话：部分消息可能属于同一逻辑对话，但被拆分为多个独立对话。该情况发生于诈骗者使用此前未关联的新邮箱地址联系同一受害者标识符（如邮箱地址）且未提前告知时。

媒介切换异常：由于提示词处理存在缺陷，媒介切换可能显得不自然。例如，大语言模型(LLM)可能表示即将切换至Telegram，但承载该表述的消息本身已处于Telegram平台。

合成个人数据：受害者提供的所有个人数据均为虚构——由数据集作者或大语言模型生成。但巧合之下，数据可能与现实实体相似，使用时请谨慎。

不完整的信使交互表示：部分交互（如Instagram或Telegram上的通话）无法被完整呈现，此类交互将显示为"body": "null"的消息。

使用限制
本数据集仅可用于科研用途。