Phishing is a kind of attack in which criminals use spoofed emails and falsified web sites to deception people into giving up personal information. Victims recognize these emails as associated with a trusted brand, whereas in reality they are the work of con artists interested in identity theft. It is a type of attack in which cyber criminals tricks the victims to steal their personal and financial data. It has become an organized criminal activity. Spoofed emails claiming to be from legitimate source are crafted in a way to lead victims to reveal their personal, financial data by misdirecting them to the counterfeit website.