In a phishing scam, fraudsters send e-mail messages that try to lure people to Web sites faked to look like sites belonging to trusted service providers such as banks. Once they click through, people are asked to hand over credit card numbers and other sensitive personal information, which the criminals could use to commit identity fraud.