Two-factor authentication is an extra layer of security that requires a password and a passcode/security token in order to log in to an account.
Phishing and spoofing scams are when identity thieves posing as a legitimate company send you an email asking you for personal account information, either by asking you to reply or directing you to a fake website.
For more information, visit the Phishing FAQ.