Cyber criminals have perpetrated - and continue to perpetrate - on banks around the world a spin on the classic bait-and-switch manoeuvre. The new form of phishing has already proved very costly and should serve as a caution that all industries, not just financial institutions, need to develop cyber resilience to avoid getting hooked in.