If there is no one in the office qualified to provide this type of training, find a trusted IT professional or consultant to educate employees.Phishing is an internet scam that involves an email which appears to be from a legitimate company, bank, or government agency.