They make it easy to fall for those things
Years ago I worked at a bank, and one of the network security guys fell for a phishing scam. I can't remember specifically where the bad guys were based--eastern Europe, I think--but they managed to scrape a few thousand dollars out of his account.
The bank fired him over that, which I thought was more than a little draconian...otoh, he *was* supposed to be a security expert...