Abstract— Phishing is a cyber-attack that involves posing as a trustworthy source and obtaining confidential or private data. Phishers also take advantage of users' interest in a site's appearance by using web pages that appear to be authentic. Data acquired could be then used for fraudulent activities. This paper looks phishing in detail, the working or mechanism, the various types, and how to prevent from the attack.