Where criminals direct users to a fake website in order to trick them into disclosing private information, such as usernames or passwords or bank details.