"Social-engineering schemes use spoofed e-mails purporting to be from legitimate businesses and agencies to lead consumers to counterfeit web sites designed to trick recipients into divulging financial data such as user names and passwords." . . . . .