“The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user’s information.”  (source: Webopedia.com)

Tips on how to avoid being scammed by a phish:

• If you receive an unexpected email saying your account will be shut down unless you confirm your billing information, do not reply or click any links in the email body.


• Before submitting financial information through a web site, look for the "lock" icon on the browser's status bar. It means your information is secure during transmission.


• If you are uncertain about the legitimacy of any email or website, contact the company through an address or a telephone number you know to be genuine.


• If you unknowingly supply personal or financial information, contact your bank or credit card company immediately.


• Forward your phish to