Definition
Phishing is a deceptive attempt to make a person reveal credentials, approve access, send assets, or install malicious software by impersonating trust.
In market context
Messages and websites may copy a platform’s branding, create urgency, or direct the target to a look-alike domain or fraudulent support channel. Attackers can request passwords, authentication codes, recovery phrases, wallet approvals, or remote-control access. Verifying the domain independently, using phishing-resistant authentication, and contacting support through a known route are safer than following unsolicited links or instructions before taking action.
Risk context
Legitimate support should never need a password, one-time authentication code, private key, or recovery phrase.
Source
Use the primary source for fuller regulatory or market context.