> Phishers pay to send the emails. You don't pay to receive no email. So that's the conflict of interest of these businesses. > The "CA" for email is basically

> Phishers pay to send the emails. You don't pay to receive no email. So that's the conflict of interest of these businesses. > The "CA" for email is basically SPF/DKIM/DMARC as extensions but they're kind of useless because all email providers are lying about quarantine mechanisms anyways. Nothing happens if you report an abuse of spam policies. So it sounds like these email providers simply won't do anything since they're not being paid or forced to do so. I don't understand why there isnt any push from financial institutions? Since access to their customer's accounts is usually the end goal for these phishing emails. Or maybe the FTC/FCC should step in. Or some legislation is needed to enforce this.