Illegal method whereby legitimate looking e-mails (appearing to come from a well-known bank, for example) are used in an attempt to source personal information that can be used to steal a user's identity.