NY S06944

Creates three new phishing offenses in the penal law, criminalizing sending emails that urge recipients to send money, download malware-infected attachments, or click links to steal login credentials, banking information, or personal data

Phishing in the third degree (class A misdemeanor) covers the basic offense of sending fraudulent emails with intent to steal credentials, money, or introduce malware

Phishing in the second degree (class E felony) applies when phishing causes financial loss or computer damage exceeding $500 in the aggregate

Phishing in the first degree (class D felony) applies when phishing causes financial loss or computer damage exceeding $2,000 in the aggregate

Establishes a 20-year statute of limitations for prosecuting all three degrees of phishing offenses