diff --git a/app/api/phishing/campaigns/route.ts b/app/api/phishing/campaigns/route.ts
index aac35d2..cbe895b 100644
--- a/app/api/phishing/campaigns/route.ts
+++ b/app/api/phishing/campaigns/route.ts
@@ -50,9 +50,16 @@ export async function GET(request: NextRequest) {
       params
     );
 
+    const countParams: unknown[] = [];
+    let countFilter = '';
+    if (status) {
+      countParams.push(status);
+      countFilter = `WHERE status = $${countParams.length}`;
+    }
+
     const totalRes = await postgresClient.query<{ count: string }>(
-      `SELECT COUNT(*)::text AS count FROM campaigns ${statusFilter}`,
-      status ? [status] : []
+      `SELECT COUNT(*)::text AS count FROM campaigns ${countFilter}`,
+      countParams
     );
     const total = parseInt(totalRes.rows[0]?.count ?? '0', 10);