In recent times, phishing attempts have grown in frequency as fraudsters employ diverse tactics to deceive gullible victims into divulging confidential information, like financial details or login credentials. One of the most common methods of phishing is through the use of URLs, where attackers create fake web pages that mimic legitimate sites and use them to steal information from users to combat this threat, researchers and security experts have turned to machine learning techniques to develop algorithms that can accurately detect phishing URLs. In this paper, review the current state of the art in URL phishing detection using machine learning, including the various approaches and algorithms that have been developed. © 2024 Elsevier B.V., All rights reserved.