What is an online fraud action in which criminals pretend to be legitimate companies either by using emails or malicious websites that trick individuals and companies into providing useful information such as bank account numbers, social security numbers, or credit card numbers?