Look at the statistics on phishing, it's remarkably effective.