Skip to content

Glossary

Phishing

Phishing: Phishing is a fake email, text or website designed to look like a company you trust so that you will enter a password, card number or personal details.

Updated February 1, 2027

An example

An email that looks like it is from your bank says your account is locked and asks you to log in through a link. The page is a copy; the login goes to the scammer.

Why it matters to you

Almost every account takeover starts with a phishing message. The defense is never to log in through a link; go to the site yourself.

Where to go next

Plain English, every weekday

The brief defines every new term the first time it appears.

Free. Weekday mornings. Includes free access to In Case and Serum, the Latchkey tools. Unsubscribe in one click.

See also

  • Smishing

    Smishing is phishing by text message: a text that pretends to be a toll agency, delivery company or bank and links to a fake page that collects your details.

  • Vishing

    Vishing is phishing by phone call: a caller impersonates a bank, government agency or family member to get money or account access.

  • Passkey

    A passkey is a login method that replaces your password with a cryptographic key stored on your phone or computer and unlocked with your face, fingerprint or device PIN; it cannot be phished because it only works on the real site.