phishing

noun

phish·​ing ˈfi-shiŋ 

: the practice of tricking Internet users (as through the use of deceptive email messages or websites) into revealing personal or confidential information which can then be used illicitly

The most common form … is called phishing, a one-two punch using both email and Web browsing to trick people into typing confidential information into Web sites that look like the sites of real companies, especially financial institutions.

—Walter S. Mossberg

Social engineering tactics, such as phishing schemes, are often used by attackers to obtain valid credentials or other personal information.

—Jack Morse

see also spear phishing compare smishing

Did you know?

Phishing is one of the many new computer-related terms that have found their way into the general lexicon over the past decade or so. Its "ph" spelling is influenced by an earlier word for an illicit act: "phreaking." Phreaking involves fraudulently using an electronic device to avoid paying for telephone calls, and its name is suspected of being a shortening of "phone freak." A common phishing scam involves sending emails that appear to come from banks requesting recipients to verify their accounts by typing personal details, such as credit card information, into a website that has been disguised to look like the real thing. Such scams can be thought of as "fishing" for naive recipients.

Examples of phishing in a Sentence

Recent Examples on the Web

Whether that means more realistic phishing expeditions or malware that has been AI-enhanced to evade detection, the results are not good for users. —Zak Doffman, Forbes, 26 Dec. 2024

Even the seemingly most cautious among them have been duped by sophisticated phishing attacks that hack their accounts to push cryptocurrency scams by convincingly appearing to offer legitimate sponsorships from established brands. —Ashley Belanger, Ars Technica, 19 Dec. 2024

The attackers use automation to collect YouTube channels' emails and send bulk phishing messages that promise thousands of dollars in compensation—up to $50,000 for channels with over 2 million subscribers. —Kate Irwin, PCMAG, 16 Dec. 2024

Hovering Gmail Attacks Don’t click those links is a staple security protection offered by professionals advising users against age-old phishing tactics. —Davey Winder, Forbes, 14 Dec. 2024

Word History

Etymology

respelling of fishing, with ph- probably after phreaking

First Known Use

1996, in the meaning defined above

Phrases Containing phishing

• SMS phishing
• spear phishing

Podcast

Get Word of the Day delivered to your inbox!

Kids Definition

phishing

noun

phish·​ing ˈfish-iŋ 

: a scam by which an Internet user is fooled into revealing personal information which can then be used illegally

phisher

-ər 

noun

Legal Definition

phishing

noun

phish·​ing ˈfi-shiŋ 

: a fraudulent operation by which an e-mail user is duped into revealing personal or confidential information which can be used for illicit purposes (as identity theft)

Etymology

alteration of fishing (probably influenced by phreaking illegal access to a phone system)