In a nutshell, it would mean she's been tricked into handing over confidential information online.
She's probably had an email that from her bank or some other 'service' saying that they need certain information. Only the email is not from the bank at all...
Not a she. But I get the gist.