Phishing is attempting to get sensitive data from unwary people through bogus emails or fake websites. The National Institute of Science & Technology (NIST) website defines phishing well: "A technique for attempting to acquire sensitive data, such as bank account numbers, through a fraudulent solicitation in email or on a web site, in which the perpetrator masquerades as a legitimate business or reputable person."