Phishing is an online scam where criminals send fraudulent email messages, appearing legitimate. The emails contain links or attachments that trick recipients into entering confidential information (e.g. account numbers, passwords) into fake websites, or they infect computers with malware.