However, a phishing email needs to be plausible to be believable. If the email looks phony, then no one will click the malicious link or download and open the attachment. Part of making a phishing email is creating the right tone for the pretext.