I don’t understand why you don’t want to blame the victim. My own father entered his bank password into a random site he received via SMS. The url wasn’t even s

I don’t understand why you don’t want to blame the victim. My own father entered his bank password into a random site he received via SMS. The url wasn’t even similar. The only solution to this is to tell users to look at the URL bar and make that work well. If they don’t, you can’t do much.