Phishing is a cyberattack where criminals impersonate trustworthy sources to trick users into revealing personal data—like passwords, credit card numbers, or login credentials. It usually comes in emails, texts, or calls with fake links or urgent messages. To avoid phishing, never click on suspicious links or download unexpected attachments. Check for grammar errors, mismatched URLs, or odd sender addresses.

Always verify messages directly with the source, especially banks or employers. Use email filters and report phishing attempts. Cybercriminals rely on urgency and fear. Staying calm and cautious when receiving requests for sensitive info helps block their success.