Phishing works because it's related to masses. When you send thousands of email at a time, you have a chance that 0.0001% of those users will follow your instructions. Anyway this used to work better when all started. Now scammers must think to new solutions to fool others