Phishing uses fraudulent emails or websites pretending to be from trusted sources to deceive victims into revealing passwords, bank details, and other information that can enable account takeovers and financial theft.