Phishing involves criminals sending phony messages or websites, impersonating Extra or making fake offers, to steal customer credentials.