Phishing is an online scam in which cybercriminals send messages that appear to be real to get the recipient to click a link and enter confidential information. Once a link is clicked, the criminals can steal personal information, gain access to a computer network, or download malware.