Email exploit that seeks to obtain personal information. May use threats, fear, or urgency to manipulate victims. Often coordinated with malware or fraudulent website redirects.