An email that looks official but is in reality an attempt to gain access to a user's credentials, sometimes by having the user click on a link in the email and typing in their username and password.

UWM will never ask a user to provide their credentials or other confidential information over email.