Online phishing (pronounced like the word fishing) is a way to trick computer users into revealing personal or financial information through a fraudulent email message or website. A common online phishing scam starts with an email message that looks like an official notice from a trusted source, such as a bank, credit card company, or reputable online merchant. In the email message, recipients are directed to a fraudulent website where they are asked to provide personal information, such as an account number or password. This information is then usually used for identity theft.