> To fix this the answer is to educate the users. Impossible. The way to improve is to restrict the amount of damage that can be done by spoofed websites and

> To fix this the answer is to educate the users. Impossible. The way to improve is to restrict the amount of damage that can be done by spoofed websites and have multiple safe-guards in place. People cannot be expected to learn these technicalities. If they get a phone call, on the other hand, and are asked whether they really intended to make a large purchase that raised a flag somewhere, they will know what to say.