# Discovered Email Patterns — 2026-06

## Invoices (Rechnungen)

### IONITY — Lade-Rechnung
- **Sender**: `no-reply@ionity.eu`
- **Subject**: "Danke, dass du bei IONITY geladen hast"
- **Body**: Contains "Die aktuelle Rechnung ist im Anhang"
- **Attachment**: PDF invoice
- **Folder**: `Rechnungen_YYYY_MM`

### ASFINAG — Österreichische Maut-Rechnung
- **Sender**: `shop@asfinag.at`
- **Subject**: "Abbuchung Digitale Streckenmaut FLEX"
- **Body**: Contains "Rechnungsnummer", "wurde die Abbuchung ... durchgeführt"
- **Attachment**: PDF invoice
- **Folder**: `Rechnungen_YYYY_MM`

### GitHub — Payment Receipt (Sponsoring)
- **Sender**: `noreply@github.com`
- **Subject**: "[GitHub] Payment Receipt for ..."
- **Body**: Contains "GITHUB RECEIPT", "Sponsorship Amount", "Total:"
- **Attachment**: PDF receipt
- **Note**: Steuerlich oft nicht relevant, aber dokumentationswert
- **Folder**: `Rechnungen_YYYY_MM`

## Order Confirmations (Bestellungen)
*None discovered in 2026-06 scan.*

## Common Ignores (non-invoices/non-orders)

### noris network — Incident Notifications
- **Sender**: `support@noris.de`
- **Subject**: "Incident resolved (Prio X): [...]" or "Störung Internetuplink"
- **Body**: Contains "Ticketnummer", "Status: Resolved", "DDS"
- **Reason**: IT incident report, not a financial document

### Cateringexpert — System Migrations
- **Sender**: `noreply@cateringexpert.de`
- **Subject**: "Migration erfolgreich abgeschlossen", "Caterer Wechsel", "Konto Migration"
- **Body**: Contains "Umstellung", "Migration", "storniert wurden"
- **Reason**: System notification, not a real order or invoice
- **Note**: Distinguish from actual catering orders (subject: "Bestellung erfolgreich")

### Temu — Product Recommendations (not orders)
- **Sender**: via Apple Private Relay (e.g., `temu_at_eu_temuemail_com_xxx@privaterelay.appleid.com`)
- **Subject**: "Ihre Bestellung wird von uns übernommen!" or "Passend zu dem, was Sie gekauft haben"
- **Body**: Product recommendations, no order details, no order number
- **Reason**: Marketing disguised as order confirmation
- **Note**: Real Temu order confirmations contain "Bestellnummer" and item details

### Sunny Portal — Solar Energy Reports
- **Sender**: `noreply@sunnyportal.com`
- **Subject**: "Sunny Portal Info Report", "Ereignis Report"
- **Body**: Contains "Tagesertrag", "kWh", "CO2 Minderung", "Fehler"
- **Reason**: Technical energy report, not an invoice
- **Already in learning.json ignore_patterns**

### DKB Finanz-News
- **Sender**: `kundeninformation@emails.dkb.de`
- **Subject**: "Das ist neu im Juni", "DKB Finanz-News"
- **Reason**: Bank newsletter, not a statement or invoice

## New Patterns — 2026-06-09 Session

### Temu — Fake Invoice Subject (Marketing Disguised as Invoice)
- **Sender**: via Apple Private Relay (`temu_at_eu_temuemail_com_xxx@privaterelay.appleid.com`)
- **Subject**: "Deine Rechnung wird übernommen!"
- **Body**: Marketing content, product recommendations, no actual invoice or order details
- **Reason**: Temu uses deceptive subject lines ("Rechnung", "Bestellung", "Lieferung") to drive engagement — never an actual invoice or order confirmation
- **Note**: Real Temu order confirmations contain a verifiable Bestellnummer and itemized list with prices

### Oura Ring — Order Confirmation
- **Sender**: `orders@ouraring.com`
- **Subject**: "Your order is being processed" / "Your sizing kit is being processed"
- **Body**: Contains "Order number" (SO-XXXXXXX), "Sale date", "Order Total", itemized with price and VAT
- **Note**: This is a **bestellbestätigung** (order confirmation), NOT an invoice. The actual invoice/receipt comes later via email. The Sizing Kit (€5.95, discounted to €0) is also an order confirmation for the sizing tool.
- **Folder**: `Rechnungen_YYYY_MM/Bestellungen_YYYY_MM`

### American Express — Monthly Statement
- **Sender**: `AmericanExpress@welcome.americanexpress.com`
- **Subject**: "Deine Online-Monatsabrechnung liegt bereit"
- **Body**: Contains "Kontonummer-Endung", "Monatsabrechnung", "SEPA-Lastschrift", link to online card account
- **Reason**: Credit card monthly statement — financial document worth archiving even though it's not a traditional invoice from a vendor
- **Folder**: `Rechnungen_YYYY_MM`

## False Positives — Service Responses with Invoice Keywords

### AEG/Elxtra — Service Response (NOT an invoice)
- **Sender**: `service@aeg.de`, `service@elxtra.com`
- **Subject**: Ticket reply like "AW: Akkulaufzeit nicht mehr akzeptabel. Bitte um Ersatz Ticket-Nr.: 5a50166#3282150"
- **Body**: Contains "rechnung", "umsatzsteuer", "bestellung" (from embedded shop page HTML in the link)
- **Classification**: IGNORE — customer support response with spare parts shop link, not an invoice
- **Pitfall**: Body-level keyword search for invoice terms is misleading here. Always check if the email is a service/support response.

### ALH Dokumentenservice — Insurance Portal Notification (NOT an invoice)
- **Sender**: `Dokumentenservice@alte-leipziger.de`
- **Subject**: "Erinnerung an ein neues Dokument zu Ihrem ALH-Vertrag" or "Neue Dokumente zu Ihrem ALH-Vertrag"
- **Body**: Mentions "Leistungsabrechnungen" but only as UI navigation instruction ("In Hallesche4u finden Sie Leistungsabrechnungen...")
- **Classification**: IGNORE — insurance portal document notification, not a financial document
- **Pitfall**: "Abrechnungen" in body is UI text, not an actual billing document.