Phishing is a scam criminals use to obtain unsuspecting victims' private information. They create phony websites using well-known companies and brands. Then they then send email messages with links to these sites hoping people will provide personal information they can steal.