--- title: "Updated Phishing Statistics That Will Shock You | DuoCircle" description: "Phishing attempts are up 400% from January to July 2019, according to a new Webroot report. That’s not a shocking statistic." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/" --- Quick Answer Phishing attempts rose 400 percent from January to July 2019 according to a Webroot report, and the underlying tactics matured alongside volume. 29 percent of phishing sites used HTTPS, eroding the lock icon as a trust signal. 24 percent of malicious URLs were hosted on trusted domains (legitimate services abused for staging or redirect chains), bypassing reputation-based filters. Phishing emails became more personalized, drawing on data from large breaches to add context that defeats generic awareness training. The most-impersonated industries in the period were SaaS providers, financial services, payment processors, social media, and retail. The takeaway: HTTPS, familiar domains, and personalized content all increase click rates against trained users, so defense has shifted toward DMARC enforcement, link rewriting, and post-delivery detection rather than user vigilance alone. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Updated%20Phishing%20Statistics%20That%20Will%20Shock%20You&url=undefined%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F&title=Updated%20Phishing%20Statistics%20That%20Will%20Shock%20You "Share on Reddit") [ ](mailto:?subject=Updated%20Phishing%20Statistics%20That%20Will%20Shock%20You&body=Check out this article: undefined%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F "Share via Email") ![Phishing](https://media.mailhop.org/duocircle/images/2019/10/SPF-record-checker-0364.jpg) _Phishing attempts are up [400%](https://www.helpnetsecurity.com/2019/10/09/phishing-increase-2019/) from January to July 2019_, according to a new [Webroot](https://www.webroot.com/au/en) report. That’s not a shocking statistic. Afterall, phishing is a [very profitable business](/phishing-protection/one-more-reason-to-avoid-a-ransomware-attack/#more-13788) and profitable businesses tend to reinvest in their business. The more successful phishing becomes, the more **phishing attacks** you’d expect to see. The shocking statistics highlight just how sophisticated phishing has become. For example, _nearly one third (29%) of phishing sites use HTTPS_. [HTTPS](https://en.wikipedia.org/wiki/HTTPS) on a website used to be a **badge of security**. You could blindly trust a website with HTTPS. Not anymore. Hackers are also using trusted domains to trick victims. _Almost one in four (24%) malicious URLs were found hosted on trusted domains_. Hackers use **trusted domains** because, just like HTTPS, they raise less suspicion among users and are more difficult for security technology to detect. Not only are **phishing emails** becoming more sophisticated, they’re also becoming more personalized. “We are beginning to see _hackers create more personalized phishing emails using data gathered in recent massive breaches_, as well as the use of HTTPS and trusted domains to seem more legitimate. These tactics take advantage of familiarity and context, and result in unwarranted trust,” Webroot Senior Threat Research Analyst Tyler Moffitt [said](https://www.technologydecisions.com.au/content/information-technology-professionals-association/article/phishing-sites-using-https-to-trick-users-411287848). The top industries impersonated by phishing include: - 25% are SaaS/Webmail providers - 19% are financial institutions - 16% social media - 14% retail - 11% file hosting - 8% payment services companies The other statistics of note have to do with Windows 7, and operating system that’s coming to the end of its life. Case in point, “_Windows 7 is becoming even riskier, with infections **increasing by 71%.**_” [![protect](https://media.mailhop.org/duocircle/images/2019/10/spf-record-3067.jpg)](https://media.mailhop.org/duocircle/images/2019/10/spf-record-3067.jpg) The numbers will only go up from there. Are you prepared? If not, you need true, real-time [phishing protection](/email/phishing-protection) from [DuoCircle](/). _It protects against ransomware, blocks malicious websites and comes with real-time **link click protection**_. It sets up in 10 minutes, costs pennies per month per account and comes with 24/7 live technical support. Don’t become a victim of shocking phishing statistics. Head on over to DuoCirlce.com. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F) [ ](https://twitter.com/intent/tweet?text=Updated%20Phishing%20Statistics%20That%20Will%20Shock%20You&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fupdated-phishing-statistics-that-will-shock-you%2F) Copy Related Articles - [ ![AI-Generated Phishing](https://media.mailhop.org/duocircle/images/2026/04/spf-record-4522.jpg) AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Phishing ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/) - [ ![spf-permerror-4555](https://media.mailhop.org/duocircle/images/2023/05/spf-permerror-4555.jpg) 10 Applications of ChatGPT that Hackers Are Already Exploiting Phishing ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/) - [ ![Email-Based Cyber-Attacks](https://media.mailhop.org/duocircle/images/2016/03/spf-record-tester-4455.jpg) 65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Phishing ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/) - [ ![Email-based Ransomware Attacks](https://media.mailhop.org/duocircle/images/2018/02/email-smtp-service-7834.jpg) 7 Ways to Protect Your Organization from Email-based Ransomware Attacks Phishing ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) ## Related Articles [ Phishing 11m AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Apr 28, 2026 ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/)[ Phishing 5m 10 Applications of ChatGPT that Hackers Are Already Exploiting May 3, 2023 ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/)[ Phishing 4m 65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Mar 29, 2016 ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/)[ Phishing 9m 7 Ways to Protect Your Organization from Email-based Ransomware Attacks Feb 11, 2018 ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Updated Phishing Statistics That Will Shock You","description":"Phishing attempts are up 400% from January to July 2019, according to a new Webroot report. That’s not a shocking statistic.","url":"https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/","datePublished":"2019-10-17T17:02:24.000Z","dateModified":"2025-05-23T17:41:07.000Z","dateCreated":"2019-10-17T17:02:24.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/"},"articleSection":"phishing-protection","keywords":"","wordCount":333,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/10/SPF-record-checker-0364.jpg","caption":"Phishing","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Phishing"},{"@type":"ListItem","position":3,"name":"Updated Phishing Statistics That Will Shock You","item":"https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Phishing","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Updated Phishing Statistics That Will Shock You","item":"https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Updated Phishing Statistics That Will Shock You","description":"Phishing attempts are up 400% from January to July 2019, according to a new Webroot report. That’s not a shocking statistic.","url":"https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/","datePublished":"2019-10-17T17:02:24.000Z","dateModified":"2025-05-23T17:41:07.000Z","dateCreated":"2019-10-17T17:02:24.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/updated-phishing-statistics-that-will-shock-you/"},"articleSection":"phishing-protection","keywords":"","wordCount":333,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/10/SPF-record-checker-0364.jpg","caption":"Phishing","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```