Phishing Prevention Framework Reduces Incidents by Half

FS-ISAC introduces a Phishing Prevention Framework that, in pilots with three banks, cut phishing abuse complaints by about half through data-centric abuse intake, structured reporting, cross-team intelligence sharing, and cataloging of customer communication channels. The guidance prioritizes implementation steps and addresses the shift toward phone-based phishing (vishing/smishing), now roughly 23% of attacks, urging organizations to complement email defenses with telecom partnerships (e.g., Do Not Originate) and broader anti-phishing technologies. While designed for financial services, the framework is broadly applicable, but emphasizes that fraudsters adapt quickly, necessitating ongoing education, intelligence collection, and sector-wide collaboration.