Almost all phishing attempts at my domain are from google. Many Norton subscription bills for around $350. I report every single one to google. I can’t believe they aren’t using there AI to figure this out.
Meanwhile have a complaint volume of more than 0.1% and they'll consider you extremely suspicious and start actively interfering with your deliveries.
Then you get into the forgotten early 2000s era google "postmaster tools" to try to poke through the chicken entrails to divine the nature of your issue.
Because Google is too big to fail, all Gmail traffic is essentially whitelisted and they can't be bothered to do anything about it.