New research suggests that phishing attacks, although increasing rapidly, aren’t proliferating on a wildfire basis. Instead, they might actually he controlled by a small number of criminal organizations, and dollar losses once estimated at more than US$1 billion might be just above one tenth of that. However, the psychological toll phishing scams place on both service providers and end users can still cripple e-commerce © 2005, IEEE. All rights reserved.