Known as "phishing" or "carding," thieves will attempt to persuade you to disclose sensitive information such as credit card
numbers, bank account information, social security numbers, and passwords. This is done using an official looking email from a
company that you may have previously done or currently do business with, such as an online bank, auction site or Internet service provider.

The email will usually inform you that you need to update or validate your billing information and will then direct you to a
website that has been created by the thief to look like the legitimate site. This cloned site will capture all of the personal
and sensitive information that you enter, where it will then be utilized by the thief.

The
Anti-Phishing Working Group,
an industry association of financial institutions, online merchants, and ISP's, maintains an
up-to-date site with new and archived alerts pertaining to "phishing" and fraudulent emails.