What is anti-phishing intelligence sharing (APWG)?

You've probably heard the term "threat intelligence" thrown around in security circles. But what does it actually mean in practice? The Anti-Phishing Working Group (APWG) is one of the clearest real-world examples of that idea in action.

APWG is a global coalition of over 2,200 organizations that pool their knowledge about phishing attacks. Banks, tech platforms, security vendors, and law enforcement agencies all contribute data. In return, they all get access to what everyone else has spotted.

The core of what APWG runs is the eCrime database, a shared repository of confirmed phishing URLs from around the world. When one member detects a new phishing campaign (say, a brand impersonation attack spoofing a major bank), that URL gets flagged in the database and every other member can act on it immediately. No waiting for public disclosure. No reinventing the wheel.

Beyond the database, APWG publishes quarterly trend reports showing what phishing activity looks like globally. Their research is widely cited in the security industry and gives a useful picture of which sectors are being targeted and how tactics are shifting.

Why does this matter if you run email? If your domain gets spoofed in a phishing campaign, APWG members (including major inbox providers and security filters) share that intelligence fast. That collective response is part of why phishing campaigns that target recognizable brands often get blocked quickly across multiple platforms at once. It's not magic. It's coordinated data sharing.

For most senders, APWG membership isn't something you'd pursue directly. But knowing it exists explains why your own domain authentication (SPF, DKIM, DMARC) matters so much. Proper authentication makes it harder for attackers to spoof your domain in the first place, and that's what keeps your brand out of the APWG database for the wrong reasons.

If you want to check whether your authentication is set up correctly, our free SPF checker is a good starting point. Or if something feels off with your domain reputation, our SOS hotline is free to use.