# What is phishing? > Phishing is a fake email or message meant to trick you into paying, clicking or sharing details. See how AI makes it more convincing and how offices check. Source: https://learn.ynteractive.com/content/glossary/phishing · Updated 2026-10-06 · Free from Stepthrough (https://learn.ynteractive.com) [Business](https://learn.ynteractive.com/content/glossary#topic-business) · [AI glossary](https://learn.ynteractive.com/content/glossary) Quick answer Phishing is a message that pretends to come from someone you trust, such as a vendor, client, bank or your own boss, to trick you into clicking a link, sharing a password or sending money. AI tools now let scammers write polished, personalized phishing emails in any tone, with no spelling mistakes to give them away. Last updated October 6, 2026 Updated October 6, 2026 · By [Robert Breen](https://learn.ynteractive.com/content/about) ## Why it matters for a small business The classic warning signs, bad grammar and a generic "Dear customer," are fading. An AI-written email can copy a vendor's style, mention a real invoice number taken from a hacked mailbox, and sound exactly as rushed as your boss does on a Friday. Some attacks add a cloned voice on a phone call. Looking for typos is no longer enough. For office teams the most expensive version is usually the fake vendor or client email: "We changed banks, please send this month's payment to the new account." The fix is a process, not a sharper eye. Confirm any change of payment details by calling a phone number you already have on file, never one from the email, and require a second person to approve it. ## In a real lesson: Reply Faster to Clients Chasing Their Refund: ChatGPT for Tax and Bookkeeping Firms The [Reply Faster: Client Refund Emails lesson](https://learn.ynteractive.com/content/chatgpt-reply-client-refund-emails-accounting) is not about scams, but it shows the habit that stops them. Northgate Tax & Bookkeeping, a made-up firm, gets an email from its client Greg Alvarez: "we switched banks last month. Can the refund go to the new account? I can email you the numbers." Greg is real within the story, but the firm's facts treat bank details the way every office should: "never send account numbers by email." Instead, the client adds the routing and account numbers in the secure portal under **Refund details**. A bank change request in an email, even a friendly one, never changes where money goes. The [email responder lesson](https://learn.ynteractive.com/content/ai-email-responder-gmail-drafts-n8n) adds a second layer. Its agent for Greenline Pest Control, also made up, can only create drafts and never sends, so a person reads every reply. That pause is where someone notices that the "customer" is really a phishing attempt. [Try this lesson free](https://learn.ynteractive.com/modules/accounting-reply-faster) or [read the step-by-step guide](https://learn.ynteractive.com/content/chatgpt-reply-client-refund-emails-accounting). ## Common confusions ### Phishing vs spam Spam is unwanted bulk mail, mostly advertising. Phishing is deliberate deception aimed at your money, passwords or data, and it may be sent to just one person. ### Phishing vs business email compromise Business email compromise is a phishing scheme where the attacker poses as, or takes over, a real executive or vendor account to redirect payments. It often has no link or attachment at all, just a believable request. ## Tips - Verify every bank change or urgent payment request by phone, using a number from your own records. - Slow down when a message pushes urgency or secrecy. That is the scammer's main tool. - Report suspected phishing to whoever handles IT instead of just deleting it, so others get warned. - Turn on [multi-factor authentication](https://learn.ynteractive.com/content/glossary/multi-factor-authentication) so a stolen password alone is not enough. ## Related terms [Jailbreak](https://learn.ynteractive.com/content/glossary/jailbreak) · [AI literacy](https://learn.ynteractive.com/content/glossary/ai-literacy) · [Multi-factor authentication (MFA)](https://learn.ynteractive.com/content/glossary/multi-factor-authentication) · [Vendor onboarding](https://learn.ynteractive.com/content/glossary/vendor-onboarding) · [Voice cloning](https://learn.ynteractive.com/content/glossary/voice-cloning) · [Personally identifiable information (PII)](https://learn.ynteractive.com/content/glossary/pii) ## More Business terms [Phone screen](https://learn.ynteractive.com/content/glossary/phone-screen) · [PO approval workflow](https://learn.ynteractive.com/content/glossary/purchase-order-approval) · [PO number](https://learn.ynteractive.com/content/glossary/purchase-order-number) · [Policy endorsement](https://learn.ynteractive.com/content/glossary/policy-endorsement) ## Where you use it: free lessons - [Reply Faster to Clients Chasing Their Refund: ChatGPT for Tax and Bookkeeping Firms](https://learn.ynteractive.com/content/chatgpt-reply-client-refund-emails-accounting) (ChatGPT, 10 min) - [AI Email Responder: Draft Gmail Replies Automatically with n8n](https://learn.ynteractive.com/content/ai-email-responder-gmail-drafts-n8n) (n8n, 12 min) - [Reply Faster to a Client Asking for a Case Update: ChatGPT for Small Law Firms](https://learn.ynteractive.com/content/chatgpt-client-case-update-email-law-firm) (ChatGPT, 10 min) ## Prompt templates that use it [Nonpayment cancellation warning email](https://learn.ynteractive.com/content/prompts/nonpayment-cancellation-warning-email-prompt) · [Vendor bank change verification prompt](https://learn.ynteractive.com/content/prompts/vendor-bank-change-verification-prompt) ## Frequently asked questions **How can I tell if a vendor email is phishing?** You often cannot tell from the email alone. Check the sender's full address, hover over links before clicking, and confirm any request involving money or passwords through a separate channel you already trust. **Can AI help me spot phishing emails?** It can point out warning signs if you paste in a suspicious message, but do not rely on it. Many email systems already filter phishing. Your verification process is the real protection. [All AI glossary terms, A to Z](https://learn.ynteractive.com/content/glossary) · [Free prompt templates](https://learn.ynteractive.com/content/prompts)