Cybercriminals gather data through social media, security breaches, or leaked databases. Using this information, they build either targeted or mass campaigns.

They design a professional-looking email: logos, brand colours, well-written text, and a tone similar to that of the real organisation. Everything is designed to avoid raising suspicion.

The message usually contains a pretext that creates pressure: an account issue, a suspicious transaction, or a required update. The goal is to make the victim act quickly, without thinking too much.

The email contains a malicious attachment or a button or link that leads to a fake website designed to look like the real one. This page typically asks the user to enter personal or banking details, or even to download malware to their device.

Once the person fills out the form, the data is sent directly to the scammer. In some cases, malicious software is also installed on the device.

With the information obtained, cybercriminals can access bank accounts, make unauthorised purchases, or steal the victim's identity.

The stolen data can be used to deceive other people or become part of larger fraud networks. The attack doesn't always end with a single victim.