Phishing is a social engineering attack where scammers impersonate legitimate individuals or organizations to trick victims into revealing sensitive information, such as passwords, credit card numbers, or personal data.