The phishing meaning is a kind of online fraud: someone sends a message that pretends to come from a person or company you trust, hoping you will click a link, open a file or type in a password, card number or one-time code. The scammer then uses that information to steal money, take over accounts or spread more attacks.
The word plays on fishing. The fake message is the bait, and the victim is the fish that bites. Here is the definition of phishing in more detail, the different types, the odd spelling and the signs that a message is not what it claims to be.
Entry at a glance
Meaning
Tricking people into revealing private details through fake messagesPart of speech
Noun; verb phish (phished, phishing)Pronunciation
FISH-ing, the same as fishingPerson
phisher (the scammer)Origin
A respelling of fishing, probably shaped by phreak, an older word for phone hackersField
Cyber security, banking, everyday online lifeRegister
Neutral; used in technical and everyday English
Phishing meaning, step by step
To define phishing briefly: it is a trick, not a technical break-in. Instead of cracking a system, the attacker fools a human. A typical phishing message:
- pretends to be a bank, delivery service, employer, school or tax office
- creates pressure: your account is locked, a parcel is stuck, a payment failed
- asks you to click, log in, pay, or share a code
- leads to a fake page that looks real and records what you type
Once the scammer has your login or card details, they can empty accounts, make purchases or use your inbox to fool your contacts. That is why security teams call people the first line of defense.
Why is it spelled with ph?
The spelling is a hacker joke. By the early 1970s, people who explored and abused telephone networks had been called phone phreaks, and swapping f for ph became a habit in hacker slang. Phishing follows that pattern. Hackers are said to have used the word from the mid-1990s, though the earliest firm written records are a few years later. The exact first user is not known.
The verb is phish: scammers phished thousands of staff. A person who does it is a phisher, and an email can be described as phishy in casual, jokey talk.
Types of phishing
New names appear as scammers change tools. These are the common ones.
| Name | How it reaches you | Typical trick |
|---|---|---|
| Email phishing | Mass email | A fake login page for a bank or work account |
| Spear phishing | A message written for one person or team | Uses your name, your boss's name or a real project |
| Whaling | Targets senior leaders | A fake request to approve a large payment |
| Smishing | SMS or chat message | A short link about a parcel or a fine |
| Vishing | Voice call | A caller posing as bank staff asks for a one-time code |
| Clone phishing | A copy of a real email you got before | The link or attachment is swapped for a bad one |
Phishing often goes hand in hand with other crimes such as identity theft, extortion and money laundering.
Warning signs of a phishing message
- Urgency or fear: act within an hour or lose your account.
- A sender address that is slightly off: one letter changed, or a free email address for a big company.
- Links that do not match: hover or long press to see where a link really goes.
- Requests no real company makes: your full PIN, password or one-time code.
- Generic greetings: Dear customer, Dear user.
- Unexpected attachments, especially ones that ask you to enable something.
A text says your electricity will be cut tonight unless you pay a small amount through a link. The panic is the bait. Calling the number printed on your real bill would show the message is phishing.
Phishing in example sentences
- Our office runs a fake phishing test every month to see who clicks.
- My aunt nearly fell for a phishing call that claimed her pension was frozen.
- The school warned parents about a phishing email asking for fee payments.
- He was phished through a message that copied his manager's writing style.
- Turning on two-step login limits the damage if a phishing attack succeeds.
Phishing vs spam, hacking and doxxing
These words overlap, but each means something different.
- Spam is any unwanted bulk message. Much of it is just annoying ads. Phishing is spam with a goal of theft.
- Hacking is breaking into a system. Phishing is one way to start a hack, by getting the password from a person.
- Malware is harmful software. A phishing email may deliver it through an attachment.
- Doxxing is publishing someone's private details to harm them. It is about exposure, not tricking the victim into handing over data.
For more tech and science words, see our science and technology list.
Frequently asked questions
What is phishing in simple words?
Phishing is when a scammer sends a fake message to trick you into sharing a password, card number, code or money. The message pretends to come from someone you trust, like a bank or your office.
Is phishing a crime?
Yes. In most countries phishing falls under fraud, identity theft or computer crime laws. The exact charges depend on the place and on what the scammer did with the stolen details.
What is the difference between phishing and smishing?
Smishing is phishing by text message. The word blends SMS with phishing. The trick is the same, only the channel changes.
What should I do if I clicked a phishing link?
Do not enter anything more. Change the password for that account from the real site, turn on two-step login, and tell your bank or your IT team if money or work data could be at risk.
Can you get phished by phone?
Yes. Phone phishing is called vishing, short for voice phishing. The caller often pretends to be from your bank or a government office and asks for a code or a transfer.
Why is phishing called phishing?
It works like fishing: scammers throw out bait and wait for someone to bite. The ph spelling follows hacker slang, which had already turned phone hackers into phreaks.