13 Major Japanese Credit Card Companies, ACSiON, Anti-Phishing Council, and JCCA Expand Joint Phishing Site Takedown Initiative

Thirteen major domestic credit card companies (refer to 'Company Profiles'), ACSiON Co., Ltd. (hereinafter ACSiON), the Anti-Phishing Council, and the Japan Credit Card Association (hereinafter JCCA) will expand their joint effort to shut down phishing sites (hereinafter 'this initiative'), which began in April 2025, to deter phishing damage aimed at the fraudulent acquisition of credit card information.

In April 2025, the shutdown of phishing sites across eight credit card companies began for the first time in Japan, achieving significant results. From April 2026 onwards, to further strengthen deterrence, five new domestic credit card companies will join, significantly expanding the scope of phishing site shutdowns with a 13-company framework. This enables more comprehensive phishing countermeasures, further strengthening the prevention of damage and leading to the safety of credit card users.

### 1. Background Total credit card fraud damage in 2025 reached 51.05 billion yen, continuing to stay at a high level. Furthermore, it is estimated that approximately 75% of this damage stems from phishing, making phishing countermeasures one of the key issues in the credit card industry. In addition, the number of phishing reports has reached approximately 2.45 million annually, and the threat continues to grow.

In recent years, phishing sites have diversified beyond credit card companies and financial institutions to include EC/service providers, aviation/transportation providers, and delivery providers. Tactics have also become more sophisticated and diverse, such as combining multiple channels like email and SMS. While many credit card companies work on detecting and shutting down phishing sites that impersonate their own sites, a large amount of information, such as credit card numbers, is being stolen from phishing sites impersonating businesses outside the credit card industry. To address these challenges, eight domestic credit card companies collaborated starting in April 2025 to build a highly effective framework for deterring phishing damage that impersonates businesses outside the credit card industry.