Phishing is an attempt to trick someone into revealing sensitive information or taking an unsafe account action by impersonating a trusted party. It can arrive through messages, websites or calls. A familiar logo, urgent tone or knowledge of a public order detail is not sufficient to establish that the sender controls the genuine support channel.

A practical example
A message claiming that a subscription will close unless the viewer enters credentials on a new website deserves verification through the known contact route. The viewer can independently open the usual support page instead of following the unsolicited message's destination.
A common misunderstanding
Do not let urgency replace identity checks. Passwords, verification codes, device keys and private playlist links can expose access even when a message describes the request as a routine technical fix.
Related terms
Stable technical definition. Editorial approach