---
title: "It Doesn’t Take Long for a Phishing Attack to do its Damage | Phish Protection"
description: "Given how widespread phishing attacks are, you might think that not only are there a lot of phishing attacks, but that each one lasts a long time."
image: "https://phishprotection.com/og/blog/it-doesnt-take-long-for-a-phishing-attack-to-do-its-damage.png"
canonical: "https://phishprotection.com/blog/it-doesnt-take-long-for-a-phishing-attack-to-do-its-damage/"
---

Quick Answer

Given how widespread \*\*phishing attacks\*\* are, you might think that not only are there a lot of phishing attacks, but that each one lasts a long time. While it's true that there are a lot of phishing attacks, \_most phishing attacks do their damage in a really short time\_.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fit-doesnt-take-long-for-a-phishing-attack-to-do-its-damage%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=It%20Doesn%26%238217%3Bt%20Take%20Long%20for%20a%20Phishing%20Attack%20to%20do%20its%20Damage&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fit-doesnt-take-long-for-a-phishing-attack-to-do-its-damage%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fit-doesnt-take-long-for-a-phishing-attack-to-do-its-damage%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fit-doesnt-take-long-for-a-phishing-attack-to-do-its-damage%2F&title=It%20Doesn%26%238217%3Bt%20Take%20Long%20for%20a%20Phishing%20Attack%20to%20do%20its%20Damage "Share on Reddit") [ ](mailto:?subject=It%20Doesn%26%238217%3Bt%20Take%20Long%20for%20a%20Phishing%20Attack%20to%20do%20its%20Damage&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fit-doesnt-take-long-for-a-phishing-attack-to-do-its-damage%2F "Share via Email") 

![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2020/08/protection-from-phishing-4835.jpg) 

Given how widespread **phishing attacks** are, you might think that not only are there a lot of phishing attacks, but that each one lasts a long time. While it’s true that there are a lot of phishing attacks, _most phishing attacks do their damage in a really short time_.

[Research](https://www.usenix.org/system/files/sec20fall%5Foest%5Fprepub.pdf) conducted by USENIX recently examined **4.8 million victims** who visited phishing pages in a one-year period. And what was the average time of an attack measured by the researchers? “\[F\]rom the time they first come online, to email distribution, to visitor traffic, to ecosystem detection, and finally to **account compromise**, _we find the average campaign from start to the last victim takes just 21 hours_.” Twenty-one hours! It’s over in less than a day.

![Protection from phishing](https://media.mailhop.org/phishprotection/images/2020/08/protection-from-phishing-4835.jpg) 

What did the research discover about the number of victims? “_At least 7.42% of visitors supply their credentials and ultimately experience a compromise and subsequent fraudulent transaction_. Furthermore, a small collection of highly successful campaigns is responsible for **89.13% of victims**.” The bottom line is phishing attacks are fast and effective. And that’s why they keep happening.

One surprising finding from the research, as pointed out in [Digital Information World](https://www.digitalinformationworld.com/2020/08/an-average-life-span-of-phishing-attack-drives-to-21-hours-victimizing-thousands.html), is “the criminals usually transact after 5.19 days of the victim’s visit to the **phishing site**.” So, _even though you may lose your credentials in less than a day, it can take a week for the criminals to do anything with them_. Of course, this is an average. It may indicate that the criminals start harvesting the credentials right away but it takes ten days to act on all of them resulting in an average of about five days. Either way, your best bet is to not get phished in the first place. But, how do you avoid it? With **email security software** from [Phish Protection](/).

![Phishing protection](https://media.mailhop.org/phishprotection/images/2020/08/phishing-protection-7368.jpg) 

_Phish Protection is cloud-based email security with real-time link scanning protection_. Being cloud-based is important in protecting users from phishing attacks. We know from research that no matter how well-trained people are, a small percentage will always fall victim to a convincing **phishing email**. So, _what’s the only way to make sure this small percentage is protected_? Keep phishing emails out of inboxes altogether. And that’s what **cloud-based email security** from Phish Protection does.

_By rerouting emails to Phish Protection first, the software can scan the emails before they reach the inbox_. And since Phish Protection quarantines ALL suspicious emails, _they never reach the inbox which means nobody will ever get phished by them_.

_Phishing attacks are fast, but Phish Protection is faster._ Try it **free for 60 days**. There is no hardware to buy, no software to buy and no maintenance, ever. _It sets up in 10 minutes and costs just pennies per user per month_. Don’t be one of the 7.42%.

## Topics

[ Phishing ](/tags/phishing/) 

![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) 

[ Brad Slavin ](/authors/brad-slavin/) 

General Manager

Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base.

[LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) 

## Protect your inbox from phishing attacks

Real-time email security with 60-day free trial. No credit card required.

[Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) 

## Related Articles

[  Foundational 5m  0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks  Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[  Foundational 4m  13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization  Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[  Foundational 4m  All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center  May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/)[  Foundational 4m  2021 Phishing Trends You Need To Be Wary Of  Aug 2, 2021 ](/blog/2021-phishing-trends-to-be-wary-of/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"It Doesn’t Take Long for a Phishing Attack to do its Damage","description":"Given how widespread phishing attacks are, you might think that not only are there a lot of phishing attacks, but that each one lasts a long time.","url":"https://phishprotection.com/blog/it-doesnt-take-long-for-a-phishing-attack-to-do-its-damage/","datePublished":"2020-08-12T12:55:52.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2020-08-12T12:55:52.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/it-doesnt-take-long-for-a-phishing-attack-to-do-its-damage/"},"articleSection":"foundational","keywords":"Phishing","wordCount":474,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2020/08/protection-from-phishing-4835.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"It Doesn’t Take Long for a Phishing Attack to do its Damage","item":"https://phishprotection.com/blog/it-doesnt-take-long-for-a-phishing-attack-to-do-its-damage/"}]}
```