A phishing email is a fraudulent message that pretends to come from a trusted company, support team, or service provider. Its goal is to push the recipient into a risky action such as opening a malicious attachment, clicking a fake login link, installing software, or revealing passwords, recovery phrases, and payment details. The message often uses urgency, fear, or authority to make the request feel legitimate.
In cyber security, phishing email matters because it is a low-cost way to start a larger intrusion or fraud chain. In crypto-focused attacks, an email may reinforce a phone scam, direct the victim to a fake wallet page, or create a believable paper trail that makes the story harder to question. Defenders look for mismatched sender domains, urgent language, link manipulation, and requests for secrets. Strong filtering, user verification through known channels, and multi-factor authentication reduce the damage when a phishing email gets through.