The shared responsibility framework will focus on “a defined scope” of phishing scams as a start.

Determination of responsibility will be based on a “waterfall approach” where financial institutions, followed by telcos, are expected to bear the full loss if they fail to discharge their respective duties.

If both the financial institution and telco have carried out their duties, the consumer will have to bear the full loss.