In phishing, an attacker masquerades as a trusted entity (as a legitimate person/company) to obtain sensitive information by manipulating the victim. It is achieved by any kind of user interaction, such as asking the victim to click on a malicious link and to download a risky attachment, to get confidential information such as credit card information, usernames, passwords, and network credentials.
The following are some of the ways to prevent phishing:
Install firewalls
Rotate passwords frequently
Do not click on or download from unknown sources
Get free anti-phishing tools
Do not provide your personal information on an unsecured/unknown site