The practice of tricking Internet users (as through the use of deceptive email messages or websites) into revealing personal or confidential information which can then be used illicitly.

The most common method is when combing both Email and Web browsing to trick people into typing confidential information into Web sites that look like the sites of real companies.