Phishing is the practice of deceiving Internet users into providing sensitive personal information, such as a social security number, bank account number, or pin number, by using e-mails and websites that impersonate a trustworthy institution with a legitimate need for the information.