Financial Institutions are the Most Affected by Phishing Attacks and Scams

Stu Sjouwerman | Dec 5, 2023

Financial Institutions PhishingNew data shows how the overwhelming majority of phishing attacks on financial institutions dwarf every other industry sector by as much as a factor of 30-to-1.

It’s no secret that banks and other types of financial institutions hold all the money, so it should be no surprise that's where cybercriminals focused their malicious activities last year, according to Group IB’s Digital Risk Trends 2023 report.

According to the report, phishing attacks spoofing the financial services industry represented nearly 24% of all attacks – the highest recorded in the report (for reference, the next highest targeted industry was Social Media, with just under 17% of all attacks). With the number of phishing websites growing by 62% in just one year, the nearly one-quarter of attacks on a single industry indicates a focus by many cybercriminal groups to “go where the money is."

But what’s truly staggering is the percentage of scams targeting the financial services industry. Group IB defines scams as “illegal usage of trademarks, misrepresentation of brand partnerships, scam advertising, fake social media and messenger accounts, and illegal distribution of branded mobile apps” – activity that jumped by 304% in just one year.  According to the report, 74% of those scams focused on the financial services industry – again, demonstrating an overwhelming focus by cybercriminals.

With phishing and brand impersonation of organizations at such an all-time high, it’s necessary for anyone to heighten their sense of vigilance when interacting with banking websites, and even apps. Those within organizations responsible for any and all handling of financial details should undergo continual new-school security awareness training to maintain those needed levels of vigilance.

KnowBe4 enables your workforce to make smarter security decisions every day. Over 65,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.