is a technique of fraudulently obtaining private information, often using email or SMS. It might look like it comes from a bank or other legitimate business. The criminal hopes that the user will follow give away some important information eg by following a link to a false website and logging in with their ID.