Phishing is an illegal act in which an email is sent masquerading as a financial institution (bank or credit card company) in an attempt to acquire personal information such as a PIN, password or bank account number.