This sort of social engineering attack can require sending fraud email messages or messages that look like from a trusted resource, such as a financial institution or authorities agency. These messages usually redirect to a phony login webpage where the user is prompted to enter their login quali