Phishing is done by sending emails that look like they are from a legitimate source, but actually contain malicious content. The goal of phishing is to trick the recipient into revealing personal information such as their login credentials or credit card numbers.