The fact that people fall for phishing scams is arguably the biggest reason why such tactics are still actively used by cybercriminals. Bad actors send hundreds of thousands of emails every day, and they still consider it a win even if they steal the credentials of a single person. It does not take them that long to load up a possible phishing email campaign and then distribute it to the potential victims by merely hitting a single button, hoping for poor souls to fall in the trap.
