A customer receives a mail that looks like it is from their bank and asks for the account password. This is:

1. Phishing is an unlawful activity using fake websites or emails that look original or authentic. 2. The aim is to fraudulently collect sensitive personal details such as usernames, passwords and banking or credit card details. 3. The commonest method is email spoofing, where a forged sender address makes the mail look genuine. 4. The logo may be copied from the real institution, so the fake URL is often the only visible clue. 5. Ransomware locks the data instead of asking for it, which is a different attack. _Source: NCERT Informatics Practices Class 12, Ch 6 'Societal Impacts', S6.6.2 Phishing and Fraud Emails_