Never thought about it this way before, but phishing an individual is way higher ROI than identity fraud. So we should be extra vigilant about the former.

With the former, your recourse is essentially zero. Banks won’t do anything, cops are useless.

With the latter, banks try to prevent it and it’s harder and riskier.