Phishing

Phishing is the offense of using fraudulent electronic communications, typically emails, text messages, or fake websites designed to impersonate a legitimate organization, to deceive a victim into revealing sensitive information such as passwords, financial account details, or other personal data, or into installing malicious software. The offense is generally prosecuted under a jurisdiction's existing computer-fraud, wire-fraud, or identity-theft statutes rather than under a single dedicated phishing law, since its legal structure, obtaining something of value through deception, fits within the established elements of fraud even though the method of deception is specifically digital and impersonation-based. Phishing is commonly studied as the entry point for a substantial share of other cybercrime, since credentials or financial information obtained through a successful phishing attack are frequently used to commit identity theft, unauthorized computer access, or direct financial fraud, making the offense a foundational technique within the broader cybercrime ecosystem rather than an end in itself. More targeted variants, including spear phishing, directed at a specific individual or organization using personalized information to increase credibility, and business email compromise, impersonating a company executive or vendor to induce a fraudulent wire transfer, are recognized as more sophisticated and financially damaging forms of the same underlying deceptive technique.