Presumably Gmail already has anti-spam features which trigger based on domain name etc.

They could add anti-phish features which force confirmation before clicking a link to an uncommon domain. Startups could pay a nominal fee to get their domain reviewed and whitelisted.