Phishing and whaling are types of cybercrime used to defraud people and organizations. The average 10,000-employee company spends $3.7 million dollars a year dealing with phishing and whaling attacks alone. It's imperative that all employees of an organization are educated on how to avoid these attacks.