The email can masquerade as originating from a legitimate company asking you to validate some type of information.
Gall yr e-bost ymddangos fel pe bai'n dod gan gwmni cyfreithlon sy'n gofyn i chi ddilysu rhyw fath o wybodaeth.