Banks, telcos or consumers – who will bear phishing scam losses under proposed framework? Here are 4 scenarios