The common perception is that phishing attacks are successful because of user awareness failings. While there is some truth to that statement, successful phishing attacks compromise up to a combined nine layers of technology and user awareness. Only two or three of these layers involves a user. This presentation provides a taxonomy of successful phishing attacks and how to prevent them.