an Internet scam in which the victim receives an email that is apparently from a reputable/trusted sender (but that is actually fraudulent) and reveals confidential/personal information which the scammer can then use illicitly;
e.g. Email users probably receive several attempted phishing attacks a month.