Phishing is an action that someone takes to get someone's data that is used to access an account. In Indonesia, financial services are used as the main target in phishing attacks. Generally, financial services that use OTP codes are often attacked by phishing. The OTP code as one of the customer's personal data is useful for the verification process in accessing bank accounts. Generally, financial services that use OTP codes are often attacked by phishing. The OTP code as one of the customer's personal data is useful for the verification process in accessing bank accounts. There is a responsibility for OJK and the Ministry of Communication and Information in preventing phishing against customers. OJK and the Ministry of Communication and Information can coordinate regarding the prevention of phishing against customers through coaching, supervision, and enforcement. A task force can be formed that includes coordination between OJK and the Ministry of Communication and Information in preventing phishing against customers.