Phishing emails try to get you to download an attachment or click a link. There may be malware embedded in the attachment, or the link may prompt you to enter login information for a bank account. The scammers create websites that look so close to the real deal that you might not realize it's a scam.