phish

American  

[fish] / fɪʃ /

Sometimes brand spoof

verb (used without object)

1. to try to obtain financial or other confidential information from internet users, typically by sending an email that looks as if it is from a legitimate organization, usually a financial institution, but contains a link to a fake website that replicates the real one.

---

verb (used with object)

1. to make (someone) a victim in this way.

   If you've been phished, you should cancel your credit cards immediately.

Other Word Forms

• phisher noun

Etymology

Origin of phish

First recorded in 1995–2000; respelling (influenced by phreak ) of fish

Example Sentences

The surveillance was conducted by the force's cyber-SIGINT unit to "phish for intelligence even before any investigation had been opened against the targets, and without judicial warrants", according to the newspaper.

From BBC • Feb. 7, 2022

Image: 1Password Attackers often use leaked databases of reused passwords and email addresses to phish people, but they need both your email address and password to access a service.

From The Verge • Sep. 28, 2021

They were so bad they made 2019’s tuna phish look like Don Shula’s invincibles.

From Golf Digest • Mar. 26, 2020

These are different from warnings about malicious sites that spread malware or try to phish for users’ personal information—an SSL/TLS warning does not mean that the operators of the website you’re visiting are evil.

From Slate • Feb. 16, 2015

Thieves who have both card numbers and email addresses may try to send messages purporting to be from the card company in an attempt to phish for additional information.

From New York Times • Feb. 7, 2014