Is phising against the law?

Yes, phishing is illegal. Phishing is the act of defrauding an online account holder.
If caught phishing, malware the criminal could face hefty fines and jail time.