THE proposal for financial institutions (FIs) and telecommunication providers to share responsibility for phishing scam losses is seen as a good first step, but industry watchers said the framework will need to continue to evolve as more sophisticated scams emerge.