Phishing is an email-based attack that pretends to be from a trusted source, including companies, government agencies, or other organizations. Phishers use social engineering techniques to trick people into providing their personal information such as passwords and credit card details.