This work is about phishing detection methods and their usage in production system. Firstly it describes what phishing is and how it affects companies and users. Second part is review of commonly used methods and their testing on publicly available data sets and in production system. Final part describes custom approach for phishing detection. The approach is based on prefiltering, entity detection, most suspicious link selection and finally deciding if email is phishing or not.