Yes, phishing is illegal. Phishing is the act of defrauding an online account holder.
If caught phishing, bokep the criminal could face hefty fines and jail time.