| #

## What are phish attacks?

A phish is an email message that falsely claims to be from an established or legitimate enterprise. The message encourages recipients to click on a link that will redirect their browsers to a fraudulent website where the user is asked to update personal information such as passwords, social security numbers, and credit card numbers in an attempt to trick a recipient into providing private information that will be used for identity theft.
When the content scanning feature in ScanMail detects a phish message, it can take the following actions:

- Delete entire message
  ScanMail deletes the entire message and Exchange does not deliver it.
- Tag and deliver
  ScanMail adds a tag to the header information of the email message that identifies it as phish and then delivers it to the intended recipient.