Those that believe they can't be duped are often some of the most lucrative, and relatively easy, targets. Generally referred to as Suckers in the cyber world.
Spear fishing and whaling takes a bit more time and effort, so tends to only get used for specific circumstances, usually for information, rather than financial reward - think spying, be that governmental or business.
I sit on the edge of this sort of stuff in my day job, and have many dealings with some properly clever people who can get most people to give over stuff they know they shouldn't. via various means, including techniques similar to hypnosis. "Anyone who feels they can't be conned is an egotistical idiot"
Obviously, most scams are at least initiated by lower cost scammers, the type that pretend they are from Microsoft/Sky/BT/Police/Bank and want you to install Teamviewer on your PC so they can sort. As a rule, these tend to be easier for our brains to pick out because none of those organisations cold call you to tell you you have a problem.
Lastly, if you're stupid enough to use Arsebook - other equally inept social media platforms available - you have to accept that *everything* you have ever entered is now public domain, no matter what your privacy settings are. If any of your virtual friends, or their virtual friends, or their virtual friends or their virtual friends etc etc have ever posted *anything* public, all your private stuff is available with the right tools. Which, given the stupid passwords we tend to use in the English speaking world, generally means your passwords for most sites are guessable - at a recent event, our clever peeps used a camera to scan our names as we came in, and then used their Arsebook tools to come up with 3 likely passwords for each person... ...about 70% were correct
, with the remainder of those that had Arseache, they had enough info to socially engineer the correct passwords.
We are currently at a heightened level of various factions poking around looking for ways in anywhere, as the Admins here can testify - not that a small little car forum is much of a target. Utility companies are particularly sort after at the moment, and Southern Water has already fallen victim this year, and one of the US water companies being compromised last year. To this end, its worth remembering that you need to keep your smartphones, tablets, PCs, security cameras, set top boxes, TVs, routers and everything else fully up to date, and stop using stuff that is not up to date.