a cybercrime in which someone tricks another into revealing their personal or financial information such as their passwords or bank account numbers and then using this information to steal money from them