Phishing is a criminal act in which
social engineering
is used to steal personal identity information usually resulting in financial loss. One of the tactics employed by this type of cyber-criminal is to use
'email spoofing' to lure consumers to counterfeit websites created with the sole purpose of tricking recipients into revealing financial data such as credit card numbers, usernames, passwords, social security numbers and other personal identity information.