Loss-sharing framework assigning anti-scam duties to financial institutions and telecommunications operators for defined phishing scams. Its scope covers defined digitally enabled phishing scams.

The main requirements are to apply specified anti-scam controls and compensate qualifying victims when responsible entities breach duties.

Fraud prevention and reimbursement answer different questions. Prevention aims to stop a harmful transaction; reimbursement allocates loss after it occurs. The distinction between an unauthorised transaction and a payment the customer authorised after being deceived can change the applicable rules, as can the customer's status and the payment rail used.

An investigation needs to reconstruct the instruction, authentication, warnings, recipient information and the parties' actions. Successful authentication can establish that credentials were used without proving that a customer understood the true purpose of a payment. Equally, a name-check result can confirm account details without establishing that an underlying invoice or investment is legitimate.

The practical framework connects controls before payment with fair and evidence-based handling of claims afterwards. Eligibility, exclusions, reimbursement limits and procedural requirements belong to the specific instrument. Those conditions should be kept separate from a provider's voluntary goodwill policy and from a commercial dispute with a legitimate merchant.

The instrument also addresses reporting and evidence: investigate claims, document duty compliance and communicate outcomes.