The purpose of this research was to analyze how self-efficacy influences anti-phishing behavior and performance and whether anti-phishing behavior mediates the influence. There is a lack of research into why people fall into phishing traps. Because most phishing activities occur in the online environment, "Internet" self-efficacy was chosen to be the focus of this study. Results of this research showed that the proposed model was supported. People’s "habit" affects how they make decisions about the behavior based on their knowledge, and "anti-phishing behavior" indicates anti-phishing knowledge, so it is important to understand college students’ anti-phishing behavior and performance. As phishing attacks have become more serious in Taiwan, at the end of this study, it is our hope to provide theoretical insight for anti-phishing educators and instructional designers, so ultimately the number of the victims may be reduced.