Phishing

PCIComplianceHub · Last updated 22 September 2026

A type of social engineering attack where an attacker attempts to deceive users into revealing sensitive information, such as passwords or credit card numbers, by masquerading as a trustworthy entity. Phishing attacks can pose a threat to cardholder data and must be addressed as part of a comprehensive PCI DSS security program.