URL phishing happens when a criminal sends someone a legitimate-looking email, which then entices the recipient to take action by clicking on a link that redirects them to what seems to be a company's official website. Once there, the unsuspecting victim will be required to enter personal or financial information.