Troy Hunt:

One of the things I often hear is “Wow, you’d have to be stupid to fall for that”. By the same token, people who do fall for it often talk about how foolish they feel. The latter may be true, the former is not and that’s because this is a case of very clever social engineering.