Phishing scams typically attempt to obtain which type of information?

• A. Personal information such as card numbers, bank account details, SSN, or passwords
• B. Only email addresses
• C. Only physical addresses
• D. Only social media handles

Answer: (A)

Phishing aims to get people to reveal information that can be directly used for fraud or to gain access to accounts. The data attackers seek are personal details that allow money to be stolen or identities to be taken over, such as card numbers, bank account details, SSN, and passwords. Those are the kinds of information that let criminals pull off unauthorized transactions or access sensitive accounts, which is why this option is the most accurate description of what phishing tries to obtain.

Sometimes phishing attempts will collect other data like email addresses, physical addresses, or social media handles, but on their own those details don’t enable the same immediate ability to steal money or break into an account. They may be used to tailor attacks or spear-phishing, but the core objective remains gaining access to financial or login information.