I mean you can, but it wouldn't be ethical or in some cases legal. Spying does still exist. Phishing is just a really low level attempt at gaining information from someone, and it works. I can't imagine it's not used by people who have good, albeit questionable, careers.