Finance (Crypto and exchanges), Phishing warning

A phishing warning on a trading terminal: a tag and the headline, the only web addresses and channels the exchange uses (up to six, each shown whole in a mono face and never cut), how to check one in up to four steps, up to four things it will never ask for, then the button to report a fake and the brand's analyst. The risk warning stays on screen throughout. Thirteen seconds, and one second longer per channel.

Template	Finance (Crypto and exchanges), tpl_20eb67de501a
Variant	Phishing warning
Version	1.0.0, the newest: what a channel following this variant draws
Shapes	9x16, 4x5, 1x1, 16x9, 2x3
Length	19 seconds

Example video

The 1x1 cut of this variant, drawn from its own worked example. Open the video on its own.

What it accepts

A phishing warning: the only web addresses and channels the exchange uses (up to six, each shown whole), how to check one in up to four steps and up to four things it will never ask for, then the button to report a fake and your analyst. The risk warning stays on screen throughout. Ten seconds and more, a little longer per channel. metaData is never drawn.

Field	Type	Required	Limit	What it is
clipData	group	yes		Clip data: Everything drawn in the clip: the tag, the headline, the official channels, the steps to check one, what is never asked for, the call to action and the risk line.
clipData.tag	text		up to 20 characters	Tag: The kind of post, in the block at the top, such as Security or Scam alert.
clipData.stamp	text		up to 24 characters	Status: A short status beside the light at the top, such as ALERT or 24/7.
clipData.headline	text		up to 72 characters	Headline: What the warning says, in a few words.
clipData.intro	text		up to 120 characters	Line under the headline: One short sentence under the headline, such as who is being copied.
clipData.channelsLabel	text	yes	up to 32 characters	Channels caption: The caption on the panel of official addresses, such as Our only official channels.
clipData.channels	list	yes	at least 1, up to 6	Official channels: The only web addresses and channels the exchange uses: 1 to 6, each a short kind (Website, App, Support email) and the address exactly as it is typed. An address is shown whole, on as many lines as it needs, and never cut. Past what one screen holds they take turns.
clipData.channels[]	group			Channel
clipData.channels[].kind	text		up to 24 characters	Kind: What it is, such as Website, Mobile app, Support email or Telegram.
clipData.channels[].address	text	yes	up to 80 characters	Address: The address or handle, exactly as it is typed.
clipData.checkLabel	text		up to 32 characters	Check caption: The caption on the panel of steps, such as How to check one.
clipData.steps	list		up to 4	Steps to check: Up to four steps for checking an address before trusting it, each a short sentence, shown in turn.
clipData.steps[]	text		up to 80 characters	Step
clipData.neverLabel	text		up to 32 characters	Never caption: The caption on the panel of things never asked for, such as We will never ask for.
clipData.never	list		up to 4	Never asked for: Up to four things the exchange will never ask for, each a few words, shown in turn.
clipData.never[]	text		up to 60 characters	Thing
clipData.cta	group			Call to action: The button at the end and the line under it, such as a web address, a handle or a phone number.
clipData.cta.label	text	yes	up to 28 characters	Button: What the button says.
clipData.cta.detail	text		up to 48 characters	Line under it: An address, a handle, an app, a phone number.
clipData.riskWarning	text	yes	up to 400 characters	Risk warning: The risk warning your regulator asks for, shown in the risk panel from the first frame to the last. A long warning is set smaller, never cut.
clipData.disclaimer	text		up to 160 characters	Small print: Any other line that must be shown, above your brand's footer line.
clipData.look	group			Look: How the clip looks and moves. The same six switches in every format (theme, pace, corners, alignment, logo, logo size). Leave any out for the package's default: the brand's colours, standard pace, square corners, text at the start.
clipData.look.theme	enum		brand, light, dark, bold	Theme: Brand: your brand's own colours and background. Light or dark: a page tinted with your brand colour. Bold: your brand colour as the page.
clipData.look.pace	enum		calm, standard, punchy	Pace: How things arrive: calm fades, a standard rhythm, or punchy slams and hard cuts.
clipData.look.corners	enum		square, soft, round	Corners: The shape of cards, pictures and buttons.
clipData.look.align	enum		start, centre	Text alignment: Where the text lines up.
clipData.look.logo	enum		auto, free	Logo: The style's own: the logo on a small plate so it reads on any page. As it is: the logo whole, with no plate, frame or crop, for a logo made to stand on the page, such as one with a transparent background. As it is, make sure your logo reads on the page of the theme you choose.
clipData.look.logoSize	enum		auto, small, large	Logo size: Standard is the style's own size. Small draws the logo a fifth smaller, with its plate. Large draws it a quarter larger wherever the style has room for it, and at the standard size where it has none.
metaData	group			Meta data: Everything about the post that is never drawn in the clip: its title, its description in four lengths, one per kind of platform, and its hashtags. Reelwire adds the brand's description, link and hashtags after it. Left out, the post text is generated from the clip data.
metaData.title	text		up to 100 characters	Title: Used where the platform has a title of its own: Facebook Feed, LinkedIn, Pinterest and YouTube. Up to 100 characters, which every one of them takes.
metaData.captionTiny	text		up to 200 characters	Tiny description (Pinterest, Threads, X): Up to 200 characters. The brand's description, link and hashtags follow it within the platform's limit.
metaData.captionShort	text		up to 500 characters	Short description (Telegram, Threema, WeChat, WhatsApp): Up to 500 characters. The brand's description, link and hashtags follow it within the platform's limit.
metaData.captionMedium	text		up to 1500 characters	Medium description (Discord, Facebook Reels, Instagram, LinkedIn, Signal, Slack, TikTok): Up to 1500 characters. The brand's description, link and hashtags follow it within the platform's limit.
metaData.captionLong	text		up to 4000 characters	Long description (Facebook Feed, YouTube): Up to 4000 characters. The brand's description, link and hashtags follow it within the platform's limit.
metaData.hashtags	list		up to 15	Hashtags: Written without the #. Up to 15, which every platform takes.
metaData.hashtags[]	text		up to 60 characters	Hashtag

locales carries other languages: under each language code, the parts of clipData and metaData that differ, laid over the default, so a language with no copy still renders.

A picture is always a file from your media library: media:// followed by its id or its name. Anything the table does not list is refused, and so is anything over its limit, with a 400 schema_validation error that names the field.

Ask Reelwire for the whole JSON Schema, the document your content is checked against, without signing in:

curl "https://app.reelwire.io/v1/formats/template/tpl_20eb67de501a?variant=Phishing%20warning&version=1.0.0"

Delivery JSON

Your own system sends this to one of your streams, POST /v1/stream, and every channel listening to that stream draws it with its template. data is the document described above; a stream with an empty field map passes it to the template unchanged. Try it first on POST /v1/stream/validate, which answers the same without publishing anything. Streams and feeds explains the rest, including how to map a document of your own shape instead.

{
  "streamId": "st_your_stream_id",
  "eventId": "01M2SQMKK3G1NVFXV31DCBVB95",
  "occurredAt": "2026-09-23T07:00:00Z",
  "locale": "en",
  "data": {
    "clipData": {
      "tag": "Security",
      "stamp": "Scam alert",
      "headline": "Fake support is out there: these are the only places we use",
      "intro": "Anything else that says it is Halcyon Exchange is a scam.",
      "channelsLabel": "Our only official channels",
      "channels": [
        {
          "kind": "Website",
          "address": "https://halcyon.example"
        },
        {
          "kind": "Login",
          "address": "https://app.halcyon.example/login"
        },
        {
          "kind": "Support email",
          "address": "support@halcyon.example"
        },
        {
          "kind": "Help centre",
          "address": "https://help.halcyon.example"
        },
        {
          "kind": "Telegram",
          "address": "@halcyon_exchange_official"
        },
        {
          "kind": "Status page",
          "address": "https://status.halcyon.example"
        }
      ],
      "checkLabel": "How to check one",
      "steps": [
        "Type the address yourself or use your saved bookmark",
        "Look for the padlock and read the whole address",
        "Check the app's publisher in the store",
        "If in doubt, stop and contact us on the website"
      ],
      "neverLabel": "We will never ask for",
      "never": [
        "Your password or one-time codes",
        "Your recovery phrase or private keys",
        "Remote access to your device",
        "A transfer to a safe account"
      ],
      "cta": {
        "label": "Report a fake",
        "detail": "security@halcyon.example"
      },
      "riskWarning": "Don't invest unless you're prepared to lose all the money you invest. This is a high-risk investment and you should not expect to be protected if something goes wrong.",
      "disclaimer": "",
      "look": {
        "logo": "auto",
        "pace": "standard",
        "align": "start",
        "theme": "brand",
        "corners": "square",
        "logoSize": "auto"
      }
    },
    "metaData": {
      "title": "Scam alert: these are the only places Halcyon Exchange uses",
      "captionTiny": "Scam alert: our only official channels are on halcyon.example. We never ask for passwords, codes or recovery phrases. Crypto is high risk.",
      "captionShort": "Scam alert: fake support is out there. Our only official channels are halcyon.example, app.halcyon.example, support@halcyon.example and @halcyon_exchange_official. We will never ask for your password, codes or recovery phrase. Report a fake to security@halcyon.example.",
      "captionMedium": "Scam alert: fake support accounts are copying us. Our only official channels are https://halcyon.example, https://app.halcyon.example/login, support@halcyon.example, https://help.halcyon.example, @halcyon_exchange_official and https://status.halcyon.example. Type the address yourself or use your saved bookmark, and read the whole address before you sign in. We will never ask for your password or one-time codes, your recovery phrase or private keys, remote access to your device, or a transfer to a safe account. Report a fake to security@halcyon.example. Don't invest unless you're prepared to lose all the money you invest.",
      "captionLong": "Scam alert: fake support accounts are copying Halcyon Exchange. Our only official channels are https://halcyon.example, https://app.halcyon.example/login, support@halcyon.example, https://help.halcyon.example, @halcyon_exchange_official on Telegram and https://status.halcyon.example. Anything else that says it is us is a scam. To check an address, type it yourself or use your saved bookmark, look for the padlock and read the whole address, check the app's publisher in the store, and if in doubt stop and contact us on the website. We will never ask for your password or one-time codes, your recovery phrase or private keys, remote access to your device, or a transfer to a safe account. Report a fake to security@halcyon.example. Don't invest unless you're prepared to lose all the money you invest. This is a high-risk investment and you should not expect to be protected if something goes wrong.",
      "hashtags": [
        "cryptosecurity",
        "scamalert",
        "phishing",
        "crypto",
        "staysafe"
      ]
    }
  }
}

The delivery names no version: which build draws it is the channel's choice, the newest of its variant or the one it is pinned to. eventId is a ULID you make once per event: sending the same one again changes nothing. occurredAt is when the thing happened, not when you sent it. locale is the language of the text in data, and data.locales carries other languages beside it.