A typical ‘phishing’ email will try to direct a user to a fake, but legit looking website, where they are asked to update a password, credit card, or bank account numbers.