Phishing is a social engineering attack that relies on manipulation, deception, and human error to steal vital information and/or to gain unauthorized access to a computer system. In a phishing scam, cybercriminals impersonate trustworthy institutions and send an email asking for personal information, or they instruct recipients to click on a link which would download and install malware onto their device.