Using email and misleading websites to entice users to provide their credit card numbers, bank account numbers, passwords, usernames, and other confidential information in order to use that information for criminal purposes such as theft.