Phishing is an attack that consists of posing as a trusted third party, by email, SMS, or fake website, to obtain credentials or bank details or to get a malicious attachment opened. Clues help spot it: urgency, a suspicious sender or link, an unusual request.
Example
An email claiming to come from the bank asks you to "confirm your account" through a link leading to a fake site.