Email spoofing is when attackers disguise an email to look like it comes from a legitimate source, often used in phishing attacks to gain the recipient’s trust.