An email phishing scam is one in which cybercriminals send a fraudulent message to trick a recipient into providing sensitive information such as their login credentials, credit card information, or personal information. A scam email often appears to be sent by a legitimate company or individual, and it uses social engineering techniques to manipulate the recipient into taking action that benefits the attacker.