a common attack method and form of social engineering that uses messaging to convince you that they are coming from an authoritative source like your bank or UPS

this is a form of misdirection

kind of like typosquatting, where they capture a page similar to the source like bankofamerca or something, but then they make it look like the real page