None of this, btw, is me railing scam victims. I know a few.
It's me railing the bullshit advice people give that's reductionist because they can't conceive - despite talking to victims at the time - that they might trust someone enough to fall for shit.
They think it's a single click on a single link, or one simple thing, rather than (often) a long, slow process.