It looks legitimate. An email from Citibank appears in your mailbox asking you to verify your name, address, social security number or password for your bank account. Or it may ask for your credit card number, and provide you with a link to a website.
But by giving the information—sometime even just by clicking on the link, you provide impostors with ways to get your private data.
Want a few more tricks?