The attackers pretend to be contacting you on behalf of your bank, credit card company, tax authorities, police, IT support, etc. Their email or message will contain a URL, which is supposed to take you to the website of the bank or other organization they claim to represent.
https://www.fieldengineer.com/....article/best-time-to