With the “waterfall approach” taken under a proposed Shared Responsibility Framework (SRF) for phishing scams, only if a bank and telco fully discharge their stipulated duties will the customer at the “bottom” have to bear the loss. Besides assigning accountability for scam losses, this approach also incentivis