A majority of the phishing attacks recorded have been conducted on social media platforms that do not have account verification features.