Abstract

Phishing is a form of social engineering attack which takes advantage of human vulnerability to exploit users. Email phishing is an emerging and prevalent form of cyber attack that impersonates a trusted entity. In today's world, email has become a de facto mechanism of communication for individuals and businesses. Phishing attacks on emails are growing constantly. Hence, the need for email phishing attack detection is increasingly becoming crucial. This paper presents an email phishing attack detection (EPAD) system using Machine Learning and Natural Language Processing (NLP) techniques to detect phishing emails. The proposed work makes use of algorithms which include Support Vector Classifier, Naive Bayes, Logistic Regression, Random Forest and eXtreme Gradient Boosting (XGBoost) for the prediction of benign or phishing emails. The EPAD system focuses on content based and textual features in detecting phishing emails. Readability scores, sentiments and attachments related information are also considered for the effective phishing email detection. The EPAD system uses NLP techniques which include Term Frequency-Inverse Document Frequency (TF-IDF) and Word2Vec for capturing the semantics of the email messages. Explainable AI is employed to provide interpretability of results of email phishing detection. Consequently, the EPAD system offers the reasoning about the prediction of phished or benign email and thereby enhances user trust. Experimental outcomes demonstrate that XGBoost with Word2Vec performs optimally in comparison with other algorithms in respect of accuracy, F1-score, Area under Receiver Operating Characteristic Curve (ROC-AUC) and Matthews Correlation Coefficient (MCC) for the detection of phishing emails. A thorough evaluation carried out in terms of ablation study, statistical performance analysis and sensitivity analysis validates the effectiveness of the proposed system.

Keywords

Cyber-Attacks, Email Phishing, Explainable AI, Machine Learning, Natural Language Processing,

Downloads

Download data is not yet available.

References

  1. S. Saeed, N.Z. Jhanjhi, M.A. Khan, D.K. Yadav, Digital transformation and cybersecurity challenges. Frontiers in Computer Science, 7, (2025) 1631362. https://doi.org/10.3389/fcomp.2025.1631362
  2. B. Alotaibi, Cybersecurity attacks and detection methods in web 3.0 technology: A review. Sensors, 25(2), (2025) 342. https://doi.org/10.3390/s25020342
  3. I. Naseer, The role of artificial intelligence in detecting and preventing cyber and phishing attacks. European Journal of Engineering Science and Technology, 11, (2024) 82-86.
  4. A. Jadhav, P.R. Chandre, Survey and comparative analysis of phishing detection techniques: current trends challenges and future directions. IAES International Journal of Artificial Intelligence (IJ-AI), 14(2), (2025) 853-866. http://doi.org/10.11591/ijai.v14.i2.pp853-866
  5. M. Abdolrazzagh-Nezhad, N. Langarib, Phishing detection techniques: a review. Data Science: Journal of Computing and Applied Informatics, 9(1), (2025) 32-46. https://doi.org/10.32734/jocai.v9.i1-19904
  6. P. Bountakas, C. Xenakis. Helphed: Hybrid Ensemble Learning Phishing Email Detection. Journal of network and computer applications, 210, (2023) 103545. https://dx.doi.org/10.2139/ssrn.4147334
  7. D. Sturman, J.C. Auton, B.W. Morrison, Security awareness, decision style, knowledge, and phishing email detection: Moderated mediation analyses. Computers & Security, 148, (2025) 104129. https://doi.org/10.1016/j.cose.2024.104129
  8. F. Carroll, J.A. Adejobi, R. Montasari, How good are we at detecting a phishing attack? Investigating the evolving phishing attack email and why it continues to successfully deceive society. SN Computer Science, 3(2), (2022) 170. https://doi.org/10.1007/s42979-022-01069-1
  9. S. Salloum, T. Gaber, S. Vadera, K. Shaalan. A Systematic Literature Review on Phishing Email Detection Using Natural Language Processing Techniques. IEEE Access, 10, (2022) 65703-65727. https://doi.org/10.1109/ACCESS.2022.3183083
  10. D. Hillman, Y. Harel, E. Toch, Evaluating organizational phishing awareness training on an enterprise scale. Computers & Security, 132, (2023) 103364. https://doi.org/10.1016/j.cose.2023.103364
  11. M. Alanezi, Phishing Detection Methods: A Review. Applied Sciences and Technology, 3(9), (2021). https://doi.org/10.47577/technium.v3i9.4973
  12. M. Khonji, Y. Iraqi, A. Jones, Phishing detection: a literature survey. IEEE Communications Surveys & Tutorials, 15(4), (2013) 2091-2121. https://doi.org/10.1109/SURV.2013.032213.00009
  13. S. Paliwa, D. Anand, S. Khan, Application of Rule based Fuzzy Inference System in Prediction of Internet Phishing. International Journal of Computer Applications, 148(14), (2016) 30-37. https://doi.org/10.5120/ijca2016911334
  14. S. Rawal, B. Rawal, A. Shaheen, S. Malik. Phishing detection in e-mails using machine learning. International Journal of Applied Information Systems, 12(7), (2017) 21-24. https://doi.org/10.5120/ijais2017451713
  15. S.B. Rathod, T.M. Pattewar, (2015) Content based spam detection in email using Bayesian classifier. International Conference on Communications and Signal Processing (ICCSP), IEEE, India. https://doi.org/10.1109/ICCSP.2015.7322709
  16. P. Bountakas, K. Koutroumpouchos, C. Xenakis. A comparison of natural language processing and machine learning methods for phishing email detection. In Proceedings of the 16th International Conference on Availability, Reliability and Security, 127, (2021) 1-12. https://doi.org/10.1145/3465481.3469205
  17. S. Kavya, D. Sumathi. Staying ahead of phishers: a review of recent advances and emerging methodologies in phishing detection. Artificial Intelligence Review, 58(2), (2024) 50. https://doi.org/10.1007/s10462-024-11055-z
  18. D. Rathee, S. Mann. Detection of E-mail phishing attacks–using machine learning and deep Learning. International Journal of Computer Applications, 183(1), (2022) 1-7. https://doi.org/10.5120/ijca2022921868
  19. M. Moghimi, Varjani, A.Y. New rule-based phishing detection method. Expert systems with applications, 53, (2016) 231-242.
  20. M. Almseidin, M. Alkasassbeh, M. Alzubi, J. Al-Sawwa, Cyber-phishing website detection using fuzzy rule interpolation. Cryptography, 6(2), (2022) 24. https://doi.org/10.3390/cryptography6020024
  21. S.A. Khan, K. Iqbal, N. Mohammad, R. Akbar, S.S.A. Ali, A.A. Siddiqui, A novel fuzzy-logic-based multi-criteria metric for performance evaluation of spam email detection algorithms. Applied Sciences, 12(14), (2022) 7043. https://doi.org/10.3390/app12147043
  22. S. Sentürk, E. Yerli, İ. Sogukpınar, (2017) Email phishing detection and prevention by using data mining techniques. International Conference on Computer Science and Engineering (UBMK), IEEE, Turkey. https://doi.org/10.1109/UBMK.2017.8093510
  23. A. Yasin, A. Abuhasan, (2016) an intelligent classification model for phishing email detection. arXiv preprint arXiv:1608.02196. https://doi.org/10.48550/arXiv.1608.02196
  24. A. Karim, M. Shahroz, K. Mustofa, S.B. Belhaouari, S.R.K. Joga, Phishing detection system through hybrid machine learning based on URL. Ieee Access, 11, (2023) 36805-36822. https://doi.org/10.1109/ACCESS.2023.3252366
  25. Z. Yang, C. Qiao, W. Kan, J. Qiu, (2019) Phishing email detection based on hybrid features. In IOP Conference series: earth and environmental science, 252(4), 042051. https://doi.org/10.1088/1755-1315/252/4/042051
  26. H.S. Hota, A.K. Shrivas, R. Hota. An ensemble model for detecting phishing attack with proposed remove-replace feature selection technique. Procedia computer science, 132, (2018) 900-907. https://doi.org/10.1016/j.procs.2018.05.103
  27. G. Sonowal, Phishing email detection based on binary search feature selection. SN Computer Science 1(4) (2020) 191. https://doi.org/10.1007/s42979-020-00194-z
  28. K. Agarwal, T. Kumar, (2018) Email spam detection using integrated approach of Naïve Bayes and particle swarm optimization. In 2018 Second International Conference on Intelligent Computing and Control Systems (ICICCS), IEEE, India. https://doi.org/10.1109/ICCONS.2018.8662957
  29. A. Chakravorty, M. Price, N. Elsayed, Z. ElSayed, (2026) Context-Aware Phishing Email Detection Using Machine Learning and NLP. arXiv preprint arXiv:2603.27326. https://doi.org/10.48550/arXiv.2603.27326
  30. A. Al Tawil, L. Almazaydeh, D.S. Qawasmeh, B. Qawasmeh, M. Alshinwan, K. Elleithy, Comparative Analysis of Machine Learning Algorithms for Email Phishing Detection Using TF-IDF, Word2Vec, and BERT. Computers Materiais Continua, 81(2), (2024) 3395-3412. http://dx.doi.org/10.32604/cmc.2024.057279
  31. G. Egozi, R. Verma, (2018) Phishing email detection using robust nlp techniques. IEEE International Conference on Data Mining Workshops (ICDMW), IEEE, Singapore. https://doi.org/10.1109/ICDMW.2018.00009
  32. L.F. Gutiérrez, F. Abri, M. Armstrong, A.S. Namin, K.S. Jones, (2020) Email embeddings for phishing detection. In 2020 ieee international conference on big data (big data), IEEE, USA. https://doi.org/10.1109/BigData50022.2020.9377821
  33. N.A. Unnithan, N.B. Harikrishnan, S. Akarsh, R. Vinayakumar, K.P. Soman. Machine learning based phishing e-mail detection. Security-CEN@ Amrita (2018) 65-69.
  34. N.B. Harikrishnan, Vinayakumar, R., Soman, K.P.A machine learning approach towards phishing email detection. In Proceedings of the anti-phishing pilot at ACM international workshop on security and privacy analytics (IWSPA AP), 2013, (2018) 455-468.
  35. A. Alhogail, A. Alsabih, Applying machine learning and natural language processing to detect phishing email. Computers & Security 110, (2021) 102414. https://doi.org/10.1016/j.cose.2021.102414
  36. K. Thakur, M.L. Ali, M.A. Obaidat, A.A. Kamruzzaman, systematic review on deep- learning-based phishing email detection. Electronics, 12(21), (2023) 4545. https://doi.org/10.3390/electronics12214545
  37. Y. Korkmaz, Fraud E-mail detection using intelligent algorithms: Comparison of traditional approaches with deep learning techniques. Information Processing & Management, 63(2), (2026) 104416. https://doi.org/10.1016/j.ipm.2025.104416
  38. N.G. Jameel, L.E. George, Detection of phishing emails using feed forward neural network. International Journal of Computer Applications, 77(7), (2013) 10-15. https://doi.org/10.5120/13405-1057
  39. P. C. R. Chinta, C. S. Moore, L. M. Karaka, M. Sakuru, V. Bodepudi, S. R. Maka. Building an Intelligent Phishing Email Detection System Using Machine Learning and Feature Engineering. European Journal of Applied Science, Engineering and Technology 3(2), (2025) 41-54. https://doi.org/10.59324/ejaset.2025.3(2).04
  40. C. Patra, D. Giri, S. Nandi, A.K. Das, M.J. Alenazi, Phishing email detection using vector similarity search leveraging transformer-based word embedding. Computers and Electrical Engineering, 124, (2025) 110403. https://doi.org/10.59324/ejaset.2025.3(2).04
  41. S. Rashed, C.A. Ozcan, Novel Dual-Layer Deep Learning Architecture for Phishing and Spam Email Detection. Electronics, 15(3), (2026) 630. https://doi.org/10.3390/electronics15030630
  42. A. Kumar, J.M. Chatterjee, V.G. Díaz, A novel hybrid approach of SVM combined with NLP and probabilistic neural network for email phishing. International Journal of Electrical and Computer Engineering, 10(1), (2020) 486.
  43. I. Altan, A. Bachir, Y. Parbhulkar, A.M. Rizvi, M. Farazi, (2025) Dual-Path Phishing Detection: Integrating Transformer-Based NLP with Structural URL Analysis. In 2025 IEEE/ACS 22nd International Conference on Computer Systems and Applications (AICCSA), IEEE, Qatar. https://doi.org/10.1109/aiccsa66935.2025.11315219
  44. S. Anirudh, P.R. Nishant, S. Baitha, K.D. Kumar. An ensemble classification model for phishing mail detection. Procedia Computer Science, 233, (2024) 970-978. https://doi.org/10.1016/j.procs.2024.03.286
  45. M. Adnan, M. O. Imam, M. F. Javed, I. Murtza. Improving spam email classification accuracy using ensemble techniques: a stacking approach. International Journal of Information Security 23(1) (2024) 505-517. https://doi.org/10.1007/s10207-023-00756-1
  46. A. Mathur, A.S. Dubey, P.S. Mahara, U.D. Gandhi. Unified approach integrating Machine Learning algorithms for detection of e-mail phishing attacks. In 2024 International Conference on Computing, Sciences and Communications (ICCSC), IEEE, India. https://doi.org/10.1109/ICCSC62048.2024.10830374
  47. R. Ahmed, E.P. Sumesh, An Intelligent Phishing Email Detection System Using Ensemble Methods and Explainable AI. Knowledge-Based Systems, (2026) 115388. https://doi.org/10.1016/j.knosys.2026.115388
  48. X. Yi, Li, L., Zhang, J., Jia, Z. Heterogeneous federated learning for imbalanced phishing email detection. Cybersecurity, 9(1), (2026) 10. https://doi.org/10.1186/s42400-025-00420-2
  49. B. Lim, R. Huerta, A. Sotelo, A. Quintela, P. Kumar. (2025) EXPLICATE: Enhancing Phishing Detection through Explainable AI and LLM-Powered Interpretability. arXiv preprint arXiv:2503.20796. https://doi.org/10.48550/arXiv.2503.20796
  50. A. Alzahrani, Explainable AI-based Framework for Efficient Detection of Spam from Text using an Enhanced Ensemble Technique. Engineering, Technology & Applied Science Research 14(4), (2024) 15596-15601. https://doi.org/10.48084/etasr.7901