Which statement best describes phishing?

Study for the Certified Bank Secrecy Act Professional Test. Use flashcards and multiple-choice questions with hints and explanations. Get exam ready!

Phishing is a social engineering tactic in which attackers use deceptive messages to trick people into revealing sensitive information. The statement describing fraudulent emails to steal personal data captures the essence of phishing, since email is the most common medium used to impersonate trusted entities and lure individuals into providing usernames, passwords, credit card details, or other private information. It’s a tactic built on deception to obtain data, and while phishing can sometimes lead to malware delivery, that is not its defining purpose. It’s broader than text messages and is not the same as ransomware, which is a separate type of malware that encrypts data and demands payment.