A common recommendation for cyberattack mitigation is to use caution with chat and email, especially when downloading files or attachments, or clicking links as this is how and when users are phished.
To a well-trained eye, these scams are often obvious, leading to expressions of shock and disbelief from others that someone would fall for something so blatant. However, many of these attackers excel at social engineering and are able to choose targets (marks) they know they will have a good chance to run their con.