With phishing, criminals try to lure their intended victims by sending a fake email or making a phone call to a fake website, where data or money is stolen. The link in the email seems reliable, but the underlying website belongs to the criminals. The website can also be lifelike. By asking the victim to enter data, criminals gain access to, for example, personal data, login details or PIN codes.
See also social engineering, help desk fraud