Phishing is usually done through email, ads, or by sites that look similar to sites you already use. For example, someone who is phishing might send you an email that looks like it's from your bank so that you'll give them information about your bank account.

Phishing emails or sites might ask for:

♦ Usernames and passwords, including password changes
♦ Social Security numbers
♦ Bank account numbers
♦ PINs (Personal Identification Numbers)
♦ Credit card numbers
♦ Your mother’s maiden name
♦ Your birthday

Report a phishing email  

01. On a computer, go to Gmail. 
02. Open the message.
03. Next to Reply, click More.
      Note: If you're using classic Gmail, click the Down arrow.
04. Click Report phishing.