Phishing is a type of cyberattack where attackers impersonate trustworthy entities to trick individuals into disclosing sensitive information, such as usernames, passwords, or credit card numbers. Typically executed via email, phishing scams often direct recipients to fraudulent websites that closely resemble legitimate platforms, luring them into entering their personal details. These attacks exploit human psychology and the trust people place in familiar brands or contacts, rather than targeting technological vulnerabilities. Phishing campaigns can vary in complexity, from rudimentary attempts using generic templates to highly sophisticated schemes that are tailored to specific individuals, known as spear-phishing. As cyber threats evolve, phishing remains a persistent issue, prompting ongoing efforts in cybersecurity education, enhanced email filtering, and two-factor authentication measures to mitigate risks.