Phishing is the social engineering attack which uses email to direct you to their their website where they claim you need to update/validate your information and threatens dire consequences if you don't. This type of attack tells you to go to a counterfeit copy of a legitimate web site and enter private or security information. These private information can be later used for identity theft or to access to your financial resources.