W3C: Phishing remains root of flourishing e-crime

Internet crime often starts with phishing, the practice of duping a user into revealing bank account or log-in credentials via a fraudulent website.

Phishers send out reams of e-mail bait that say users' account information has expired or needs updating. The e-mail includes links to a site that may look very similar to their bank website, but isn't. Once those credentials are obtained, criminals use the information in a variety of creative and costly scams.