These authentic-looking messages appear to come from banks, other financial institutions and legitimate businesses, but are designed to lure recipients into divulging personal data such as bank account numbers and passwords when you attempt to logon.