Phishing is a scam that attempts to lure you into providing personal information so that it can be used to steal your identity.
If an e-mail looks suspicious or is from an unknown source, do not click on any links, provide any information or open any attachments. Clicking on a link in a phishing message could take you to a phony website asking for your account number, password and other personal information. Or it might download spyware into your computer or mobile device. Don't click on attachments or pictures unless you are sure of the source, since they can also carry spyware. Look up the website of whoever the message appears to be from and go to it directly.
Phone scammers will sometimes try to get your personal information over the phone by using tactics similar to the ones they use online. Beware of anybody who calls asking for your personal information, such as account numbers. Your bank or credit card issuer already has them and shouldn't be asking you. And if you get a voicemail from them, asking you to call back, verify their identity first by looking up the number in your statements or online.
Here are some more helpful tips and resources:
What to Watch Out For:
What to Do If You're a Victim: