The best way to protect against phishing attacks is to put strong technical controls in place with AI that can augment fallible human behaviors.
https://www.securitymagazine.com/articles/98910-ai-can-become-the-great-equalizer-to-block-phishing-attacks