Phishing is a cyberattack where scammers pretend to be someone you trust (like a vendor or bank) to trick you into revealing personal or store-related information—usually by clicking a malicious link or downloading an infected file.