Phishing (pronounced fishing) is the impersonation of a corporation or other trusted institution. Its goal is to extract passwords or other sensitive information from the victim. Phishing is typically done using e-mail or an instant messaging program. The message is intended to appear to be from an authentic source so that the victim will either respond directly or will open a URL link to a fake Web site run by the criminals. The Web sites are genuine looking, most often masquerading as bank Web sites.

The people who perpetrate phishing are counting on some people being fooled by the bait e-mail, message or Web site, even though most people will ignore their efforts because something just doesn’t ring true..