Phishing in the age of distributed intelligence: taxonomies, detection strategies, and the emerging role of federated learning

Abstract Phishing has evolved into one of the most adaptive and damaging cybersecurity threats, continually reshaping itself to exploit human behaviour, technical vulnerabilities, and, more recently, advances in artificial intelligence. As attack vectors diversify from traditional email scams to sophisticated, multi-stage, AI-generated, and hybrid phishing campaigns, defending against them has become significantly challenging. This survey provides a comprehensive and contemporary examination of the phishing landscape, tracing its evolution, analysing real-world incidents, and contextualising its growing impact through global statistics. We introduce a unified, multidimensional taxonomy that categorizes phishing attacks into distinct categories, providing a clearer understanding of how new attack techniques operate and escalate. In parallel, we review a broader range of phishing detection strategies, from list-based, heuristic, and similarity-driven techniques to modern machine learning and deep learning approaches. While these methods have advanced detection capabilities, they continue to face significant constraints related to data privacy, scalability, and the rapid emergence of novel attack patterns. Motivated by these limitations, the survey highlights the growing relevance of Federated Learning (FL) as a privacy-preserving and collaborative paradigm for phishing detection. To the best of our knowledge, this is the first comprehensive survey to examine phishing defence through the lens of FL. In particular, we examine the role of FL in enabling decentralized, privacy-aware detection without exchanging raw data, compared to centralized training in terms of performance, privacy guarantees, resilience, and scalability. Drawing from this analysis, we offer valuable insights into critical research gaps and future directions for developing robust, scalable, and privacy-aware phishing detection solutions.

Authors

Institutions

Publication Details

Journal
Progress in Artificial Intelligence
Published
2026-04-13
DOI
https://doi.org/10.1007/s13748-026-00448-6
Primary Topic
Spam and Phishing Detection
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Phishing in the age of distributed intelligence: taxonomies, detection strategies, and the emerging role of federated learning

J. Carretero, Sadi Alawadi, Javier Garcia-Blas, Esraa Daoud
Progress in Artificial Intelligence
Spam and Phishing Detection
article

Phishing in the age of distributed intelligence: taxonomies, detection strategies, and the emerging role of federated learning

J. Carretero, Sadi Alawadi, Javier Garcia-Blas, Esraa Daoud
article en

Abstract

Abstract Phishing has evolved into one of the most adaptive and damaging cybersecurity threats, continually reshaping itself to exploit human behaviour, technical vulnerabilities, and, more recently, advances in artificial intelligence. As attack vectors diversify from traditional email scams to sophisticated, multi-stage, AI-generated, and hybrid phishing campaigns, defending against them has become significantly challenging. This survey provides a comprehensive and contemporary examination of the phishing landscape, tracing its evolution, analysing real-world incidents, and contextualising its growing impact through global statistics. We introduce a unified, multidimensional taxonomy that categorizes phishing attacks into distinct categories, providing a clearer understanding of how new attack techniques operate and escalate. In parallel, we review a broader range of phishing detection strategies, from list-based, heuristic, and similarity-driven techniques to modern machine learning and deep learning approaches. While these methods have advanced detection capabilities, they continue to face significant constraints related to data privacy, scalability, and the rapid emergence of novel attack patterns. Motivated by these limitations, the survey highlights the growing relevance of Federated Learning (FL) as a privacy-preserving and collaborative paradigm for phishing detection. To the best of our knowledge, this is the first comprehensive survey to examine phishing defence through the lens of FL. In particular, we examine the role of FL in enabling decentralized, privacy-aware detection without exchanging raw data, compared to centralized training in terms of performance, privacy guarantees, resilience, and scalability. Drawing from this analysis, we offer valuable insights into critical research gaps and future directions for developing robust, scalable, and privacy-aware phishing detection solutions.

Progress in Artificial Intelligence
Al al-Bayt University (JO), Universidad Carlos III de Madrid (ES), Blekinge Institute of Technology (SE)
Universidad Carlos III de Madrid, Blekinge Tekniska Högskola
Openalex Percentile: Top 15%
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.