---
title: "Phishing"
description: "Phishing is a scam that impersonates a trusted institution to steal data. Learn how the attack works, common examples and how to protect against it."
url: "https://nodea.io/en/glossary/phishing"
lang: "en"
updated: "2026-07-13"
---

# Phishing

> Phishing is a social engineering attack in which a criminal impersonates a trusted institution or person to trick the victim into revealing sensitive data such as passwords or card numbers.

**Phishing** is a social engineering attack in which a criminal impersonates a trusted institution, company or person to trick the victim into revealing sensitive information — passwords, payment card numbers or login credentials — or into installing malware. The name plays on "fishing", because the attacker "casts bait" and waits for the victim to bite.

## How phishing works

The most common channel is a fake email or text message that looks like a communication from a bank, a service provider or a government office. The message typically creates pressure — warning of a blocked account, an overdue payment or suspicious activity — and directs the victim to a spoofed login page that closely mimics the original. Any data entered there goes straight to the criminal.

The attacks come in many forms: mass phishing blasted to thousands of recipients, precisely targeted [spear phishing](https://nodea.io/en/glossary/spear-phishing) aimed at a specific person, smishing (via SMS) and vishing (via phone). The common thread is exploiting the victim's trust and emotions rather than a technical flaw.

## Practical application

Defending against phishing combines user vigilance with technical safeguards. On the email side, sender-authentication mechanisms are key — [SPF](https://nodea.io/en/glossary/spf), DKIM and [DMARC](https://nodea.io/en/glossary/dmarc) — which make impersonating real domains harder and let spoofed messages be filtered out. Properly configured email as part of domain hosting significantly reduces the effectiveness of impersonating a company's address.

At the account level, the best barrier is [two-factor authentication](https://nodea.io/en/glossary/two-factor-authentication): even if a password is stolen, an attacker can't log in without the second factor. Spam filters, employee training and verifying addresses before clicking a link provide complementary protection.

### How do you spot a phishing message?

Typical signs include time pressure and threats of consequences, requests for a password or card details, a sender address that differs slightly from the real one, and links to domains deceptively similar to the original. Hover over a link without clicking to check the actual address, and when in doubt contact the institution directly.

### How does phishing differ from spear phishing?

Phishing is usually a mass, untargeted send to many recipients at once. Spear phishing is precisely aimed at a specific person or organization and uses previously gathered information, which makes it more convincing and harder to detect.

## Related

- [Spear phishing](https://nodea.io/en/glossary/spear-phishing)
- [SPF](https://nodea.io/en/glossary/spf)
- [DMARC](https://nodea.io/en/glossary/dmarc)
- [Two-Factor Authentication (2FA)](https://nodea.io/en/glossary/two-factor-authentication)
- [Man in the middle](https://nodea.io/en/glossary/man-in-the-middle)

---

Languages: [pl](https://nodea.pl/pl/slownik-pojec/phishing.md)  
Site index: [llms.txt](https://nodea.io/en/llms.txt)