'Phishing' is an activity that can occur when an employee within an organisation receives an email that appears to be from a genuine supplier but is false. These types of emails expose the organisation to the activities of expert cyber criminals. Which type of crime category does this activity fall within?

Phishing is a cybercrime where attackers, disguised as a trusted entity like a supplier, deceive individuals into revealing sensitive information. The core element of this activity is deception with the intent to achieve an illicit gain, typically financial. This aligns perfectly with the legal and business definition of fraud, which is wrongful or criminal deception intended to result in financial or personal gain. The email falsely represents its origin to trick the employee, which is a fraudulent act.

A. Bribery involves offering an inducement to influence an action, which is different from the deception used in phishing.
B. Human rights violations concern abuses like forced labour or discrimination, which are unrelated to this type of cybercrime.
C. Corruption is the abuse of entrusted power for private gain. While fraud can be a form of corruption, 'fraud' is the more specific and accurate term for this act of deception.

1. CIPS. (2019). Ethical and Responsible Sourcing, L4M4. Stamford, UK: Profex Publishing. Chapter 1, "Fraud, Bribery and Corruption," defines fraud as an intentional act of deception to secure an unfair or unlawful gain.

2. Chartered Institute of Internal Auditors. (2020). Fraud and procurement. IIA Guidance. This document explicitly categorises phishing and other forms of cyber-enabled deception under the umbrella of procurement fraud.

3. Association of Certified Fraud Examiners (ACFE). (2022). Report to the Nations: 2022 Global Study on Occupational Fraud and Abuse. p. 11. Defines asset misappropriation schemes, which often use cyber methods like phishing, as a primary category of occupational fraud.