Explanation
In this case, attackers indicate an alleged billing problem and the recipient needs to log in via a link to fix the problem.
The recipient will be lured to the wrong page and asked to enter their credit card information. Once they have entered this, their data will then be used for purchases on the Internet.
Example
)