Illegal sites may collect your personal data without disclosure. Some even use phishing scams—fake login pages—to steal credentials or financial information.