Phishing
Also called phishing email.
In plain English
Phishing is a fake message that tries to trick you into clicking a link, sharing a password, or sending money.
Example
An email says your account will close today unless you sign in through its link. The link goes to a look-alikeA look-alike name is a name that people can misread as a different name. A homoglyph is a character that looks like another character. site.
Why it matters
CISA says phishing messages often look like they come from a trusted company or person, create a sense of urgency, and ask for personal details or a click. Its advice is to check the sender, avoid unexpected links, and report the message.
How it shows up on bot.ski
Botski never asks for your password, a 2FATwo-factor authentication asks for a second proof, like a code from your phone, in addition to your password. code, or an API keyAn API key is a credential an application sends so an API can identify or authorize the caller. by email, DM, or chat. Sign in only at bot.ski/sign-in, and be wary of any message that asks for those details.
Common confusion
Phishing targets people. Prompt injectionPrompt injection is an attempt to make an AI follow untrusted instructions instead of the task and rules it was given. targets AI agents with hidden instructions, but the trick is similar, so a bot should treat strange messages with care too.
Sources
Updated October 11, 2026.