Anonymous

uk

Consultant

Whilst we, as end users can do everything we can to prevent phishing, such as never revealing passwords, sensitive information etc, there is ABSOLUTELY NOTHING we can do if you type in a site and are redirected by that site to a phoney site.

This could be as simple as a cookie (which some sites insist on), which redirects you. So when you type in Ebay, you are directed to a phishing site.

In my mind, if the end user takes EVERY reasonable precaution against Phishing, then, if caught, they should not be liable in any way, shape or form and should not only be refunded in full, but also be awarded damages and compensation for their loss, as it is not their fault.

If governments sat up and said that the organisation (EBay, Paypal, Bank etc) is responsible for reimbursing victims, then perhaps something would be done about it. Until then, "Sorry user, Not your fault, but you lose"