Home / Current Issue / Paper 1724971
A Systematic Literature Review of Blockchain and Distributed Ledger Technology for the Detection and Prevention of Phishing Attacks
Subject area: Science,Engineering and Technology · Area of research: Blockchain and Distributed Ledger Technology
DOI: 10.64388/ire1724971
Abstract
This study systematically reviews blockchain and distributed ledger technology (DLT) for phishing detection and prevention. It also identifies two related research streams: the use of DLT as the infrastructure for anti-phishing intelligence and analytical methods for identifying phishing in blockchain and Web3. The review synthesizes 45 publications through 2026 using PRISMA and reports descriptive mapping, thematic analysis, and evidence identification. Some of the functions of the ledger proposed include decentralized URL blacklists and auditable threat intelligence. In blockchain ecosystems, the dominant analytical methods include machine learning on account and transaction data, analysis of transaction graphs and other temporal graph models, contrastive learning, cross-chain adaptation, and payload inspection. The studies reviewed are largely focused on the Ethereum blockchain from 2023 to 2025. Other limitations identified in the studies include imbalanced classes, ambiguous or absence of labels, lack of both internal and external validation, and privacy and governance concerns. The report suggests the protective measures proposed may not substantially prevent financial loss. It concludes that, despite its potential for improving provability and accountability, the actual effect on phishing is limited without evidence of protective measures, and a timely, off-chain corrective and dispute process.
Keywords
blockchain, distributed ledger technology (DLT), phishing detection, phishing prevention, Web3 security
References
[1] Alabdan R. Phishing attacks survey: Types, vectors, and technical approaches. Future Internet. 2020;12(10):168. https://doi.org/10.3390/fi12100168
[2] Alkhalil Z, Hewage C, Nawaf L, Khan I. Phishing attacks: A recent comprehensive study and a new anatomy. Frontiers in Computer Science. 2021;3:563060. https://doi.org/10.3389/fcomp.2021.563060
[3] Anti-Phishing Working Group. Phishing activity trends report: 4th quarter 2025. APWG; 2026. Available from: https://docs.apwg.org/reports/apwg_trends_report_q4_2025.pdf
[4] Scam Sniffer. Scam Sniffer 2025: Crypto phishing losses fall 83% to $84 million. Jan 3. 2026. https://drops.scamsniffer.io/scam-sniffer-2025-crypto-phishing-losses-fall-83-to-84-million/
[5] Bhutta MNM, et al. A survey on blockchain technology: Evolution, architecture and security. IEEE Access. 2021;9:61048–61073. https://doi.org/10.1109/ACCESS.2021.3072849
[6] Edirimannage S, Nabeel M, Elvitigala C, Keppitiyagama C. PhishChain: A decentralized and transparent system to blacklist phishing URLs. arXiv:2202.07882. 2022. https://doi.org/10.48550/arXiv.2202.07882
[7] Trad F, Semaan-Nasr E, Chehab A. MLPhishChain: A machine learning-based blockchain framework for reducing phishing threats. Frontiers in Blockchain. 2024;7:1484894. https://doi.org/10.3389/fbloc.2024.1484894
[8] He B, et al. TxPhishScope: Towards detecting and understanding transaction-based phishing on Ethereum. In: Proc. ACM SIGSAC Conf. Computer and Communications Security; 2023. p. 120–134. https://doi.org/10.1145/3576915.3623210
[9] Chen Z, Hu Y, He B, Luo D, Wu L, Zhou Y. Dissecting payload-based transaction phishing on Ethereum. arXiv:2409.02386. 2024.
[10] Naqvi B, Perova K, Farooq A, Makhdoom I, Oyedeji S, Porras J. Mitigation strategies against the phishing attacks: A systematic literature review. Computers & Security. 2023;132:103387. https://doi.org/10.1016/j.cose.2023.103387
[11] Safi A, Singh S. A systematic literature review on phishing website detection techniques. Journal of King Saud University - Computer and Information Sciences. 2023;35(2):590–611. https://doi.org/10.1016/j.jksuci.2023.01.004
[12] Ghosh M, Halder R, Chandra J. A systematic review on Ethereum phishing scam detection: Challenges, empirical insights, and future directions. Blockchain: Research and Applications. 2025. https://doi.org/10.1016/j.bcra.2025.100424
[13] Ghnemat R, Mosa H. Blockchain-based fraud detection: A systematic review of Ethereum network applications. Cluster Computing. 2025;28:1080. https://doi.org/10.1007/s10586-025-05797-w
[14] Chen W, Guo X, Chen Z, Zheng Z, Lu Y. Phishing scam detection on Ethereum: Towards financial security for blockchain ecosystem. In: Proc. 29th Int. Joint Conf. Artificial Intelligence; 2020. p. 4506–4512. https://doi.org/10.24963/ijcai.2020/621
[15] Yuan Q, Huang B, Zhang J, Wu J, Zhang H, Zhang X. Detecting phishing scams on Ethereum based on transaction records. In: Proc. IEEE Int. Symp. Circuits and Systems; 2020. p. 1–5. https://doi.org/10.1109/ISCAS45731.2020.9180815
[16] Zhang D, Chen J. Blockchain phishing scam detection via multi-channel graph classification. In: Blockchain and Trustworthy Systems; 2021. p. 241–256. https://doi.org/10.1007/978-981-16-7993-3_19
[17] Chaudhari D, Agarwal R, Shukla SK. Towards malicious address identification in Bitcoin. arXiv:2112.11721. 2021.
[18] Kabla AHH, Anbar M, Manickam S, Karuppayah S. Eth-PSD: A machine learning-based phishing scam detection approach in Ethereum. IEEE Access. 2022;10:118043–118057. https://doi.org/10.1109/ACCESS.2022.3220780
[19] Li P, Xie Y, Xu X, Zhou J, Xuan Q. Phishing fraud detection on Ethereum using graph neural network. arXiv:2204.08194. 2022. https://doi.org/10.48550/arXiv.2204.08194
[20] Li S, Gou G, Liu C, Hou C, Li Z, Xiong G. TTAGN: Temporal transaction aggregation graph network for Ethereum phishing scams detection. In: Proc. ACM Web Conf; 2022. p. 661–669. https://doi.org/10.1145/3485447.3512226
[21] Karthika RN, Valliyammai C, Naveena M. Phish Block: A blockchain framework for phish detection in cloud. Computer Systems Science and Engineering. 2023;44(1):777–795. https://doi.org/10.32604/csse.2023.024086
[22] Asiri S, Xiao Y, Alzahrani S, Li S, Li T. A survey of intelligent detection designs of HTML URL phishing attacks. IEEE Access. 2023;11:6421–6443. https://doi.org/10.1109/ACCESS.2023.3237798
[23] Joshi K, et al. Machine-learning techniques for predicting phishing attacks in blockchain networks: A comparative study. Algorithms. 2023;16(8):366. https://doi.org/10.3390/a16080366
[24] Kim J, Lee S, Kim Y, Ahn S, Cho S. Graph learning-based blockchain phishing account detection with a heterogeneous transaction graph. Sensors. 2023;23(1):463. https://doi.org/10.3390/s23010463
[25] Li S, Wang R, Wu H, Zhong S, Xu F. SIEGE: Self-supervised incremental deep graph learning for Ethereum phishing scam detection. In: Proc. 31st ACM Int. Conf. Multimedia; 2023. https://doi.org/10.1145/3581783.3612461
[26] Zhang Y, Su Y. Ethereum phishing detection based on graph structure and transaction sequence features fusion. In: Service Science; 2023. p. 247–262. https://doi.org/10.1007/978-981-99-4402-6_18
[27] Li S, et al. TGC: Transaction graph contrast network for Ethereum phishing scam detection. In: Proc. Annual Computer Security Applications Conf; 2023. p. 352–365. https://doi.org/10.1145/3627106.3627109
[28] Ratra S, Ghosh M, Baliyan N, Mohan JR, Singh S. Graph neural network based phishing account detection in Ethereum. The Computer Journal. 2024;67(12):3160–3168. https://doi.org/10.1093/comjnl/bxae079
[29] Yu W, et al. Phishing fraud detection based on the streaming graph algorithm. In: Blockchain Transaction Data Analytics; 2024. p. 125–147. https://doi.org/10.1007/978-981-97-4430-5_6
[30] Yan C, Han X, Zhu Y, Du D, Lu Z, Liu Y. Phishing behavior detection on different blockchains via adversarial domain adaptation. Cybersecurity. 2024;7:45. https://doi.org/10.1186/s42400-024-00237-5
[31] Chen Z, Huang J, Liu S, Long H. Multiscale feature fusion and graph convolutional network for detecting Ethereum phishing scams. Electronics. 2024;13(6):1012. https://doi.org/10.3390/electronics13061012
[32] Chen Z, Liu SZ, Huang J, Xiu YH, Zhang H, Long HX. Ethereum phishing scam detection based on data augmentation method and hybrid graph neural network model. Sensors. 2024;24(12):4022. https://doi.org/10.3390/s24124022
[33] Huang H, et al. PEAE-GNN: Phishing detection on Ethereum via augmentation ego-graph based on graph neural network. IEEE Transactions on Computational Social Systems. 2024;11(3):4326–4339. https://doi.org/10.1109/TCSS.2023.3349071
[34] Liu SZ, et al. Detection of Ethereum phishing fraud nodes based on feature enhancement strategy and GBM. Electronics. 2024;13(24):5060. https://doi.org/10.3390/electronics13245060
[35] Zhang J, Sui H, Sun X, Ge C, Zhou L, Susilo W. GrabPhisher: Phishing scams detection in Ethereum via temporally evolving GNNs. IEEE Transactions on Services Computing. 2024;17(6):3727–3741. https://doi.org/10.1109/TSC.2024.3411449
[36] Li C, Liu R, Zhang Y, Xie N, Zeng Q. Who will be hooked?: A phishing fraud detection model based on dynamic graph temporal feature coding in Ethereum. In: Proc. Int. Conf. Blockchain and Web3.0 Technology Innovation and Application Exchange; 2025. p. 130–141. https://doi.org/10.1007/978-981-97-9412-6_12
[37] Kavya S, Sumathi D. Staying ahead of phishers: A review of recent advances and emerging methodologies in phishing detection. Artificial Intelligence Review. 2024. https://doi.org/10.1007/s10462-024-11055-z
[38] Banerjee J, Ghosh M. In hot pursuit of phishers: Phishing detection in blockchain at a glance. In: Proc. Int. Conf. Innovative Computing and Communications; 2025. p. 293–307. https://doi.org/10.1007/978-981-96-7523-4_21
[39] Sui H, Zhang J, Chen B, Wu D, Sun X, Palaiahnakote S. EPAD: Ethereum phishing scam detection via graph contrastive learning. Expert Systems with Applications. 2025. https://doi.org/10.1016/j.eswa.2025.128227
[40] Alghuried A, Alghamdi A, Alkinoon A, Choi S, Mohaisen M, Mohaisen D. Fishing for phishers: Learning-based phishing detection in Ethereum transactions. arXiv:2504.17953. 2025.
[41] De Rosa P, Queyrut S, Bromberg YD, Felber P, Schiavoni V. PhishingHook: Catching phishing Ethereum smart contracts leveraging EVM opcodes. arXiv:2506.19480. 2025.
[42] Tolah A. BlockIntelChain: A blockchain-based cyber threat intelligence sharing architecture. Scientific Reports. 2025. https://doi.org/10.1038/s41598-025-29152-6
[43] Chen M, Liu R, Song Q, Song G, Li C, Zeng Q. HSTA: Ethereum phishing fraud detection model based on dynamic graph hybrid spatio-temporal attention mechanism. In: Proc. Int. Conf. Blockchain and Web3.0 Technology Innovation and Application Exchange; 2026. p. 50–61. https://doi.org/10.1007/978-981-95-4142-3_5
[44] Wu C, Chen J, Lin S, Li H, Zhao Z. Phishing detection in Ethereum via temporal graph contrastive learning. arXiv:2605.01207. 2026.
[45] Basit A, Zafar M, Liu X, Javed AR, Jalil Z, Kifayat K. A comprehensive survey of AI-enabled phishing attacks detection techniques. Telecommunication Systems. 2021;76(1):139–154. https://doi.org/10.1007/s11235-020-00733-2
[46] Murugesan S, Murugesan S, Ganesan R, Alhalabi W. Web phishing detection techniques: A survey on the state-of-the-art, taxonomy and future directions. IET Networks. 2020;9(5):235–246. https://doi.org/10.1049/iet-net.2020.0078
[47] Temoshok D, et al. Digital identity guidelines: authentication and authenticator management. NIST Special Publication 800-63B-4. Gaithersburg (MD): National Institute of Standards and Technology; 2025. https://doi.org/10.6028/NIST.SP.800-63B-4
[48] Page MJ, et al. The PRISMA 2020 statement: An updated guideline for reporting systematic reviews. BMJ. 2021;372:n71. https://doi.org/10.1136/bmj.n71
How to cite this paper
@article{1724971,
author = {Egbele Wilfred Odianosen, Temitope Olufunmi Atoyebi, Ridwan Kolapo, Prema Kirubakaran},
title = {A Systematic Literature Review of Blockchain and Distributed Ledger Technology for the Detection and Prevention of Phishing Attacks},
journal = {Iconic Research And Engineering Journals},
year = {2026},
volume = {10},
number = {5},
pages = {2084-2093},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1724971.pdf},
abstract = {This study systematically reviews blockchain and distributed ledger technology (DLT) for phishing detection and prevention. It also identifies two related research streams: the use of DLT as the infrastructure for anti-phishing intelligence and analytical methods for identifying phishing in blockchain and Web3. The review synthesizes 45 publications through 2026 using PRISMA and reports descriptive mapping, thematic analysis, and evidence identification. Some of the functions of the ledger proposed include decentralized URL blacklists and auditable threat intelligence. In blockchain ecosystems, the dominant analytical methods include machine learning on account and transaction data, analysis of transaction graphs and other temporal graph models, contrastive learning, cross-chain adaptation, and payload inspection. The studies reviewed are largely focused on the Ethereum blockchain from 2023 to 2025. Other limitations identified in the studies include imbalanced classes, ambiguous or absence of labels, lack of both internal and external validation, and privacy and governance concerns. The report suggests the protective measures proposed may not substantially prevent financial loss. It concludes that, despite its potential for improving provability and accountability, the actual effect on phishing is limited without evidence of protective measures, and a timely, off-chain corrective and dispute process.},
keywords = {blockchain, distributed ledger technology (DLT), phishing detection, phishing prevention, Web3 security},
month = {November},
doi = {https://doi.org/10.64388/ire1724971}
}