I actually would rephrase it as there weren’t enough users with money to make using email a worthwhile scam medium.

Email is low trust and almost any user is susceptible to being scammed, because there aren’t good trust markers in emails, and companies use it in ways that make it indistinguishable from spam.