It depends on the scam really. If it is a personal scam (phone call/email) I think it is mostly people not understanding, often tech, but it could be other things. Which is why seniors are the number one targeted demographic for these kinds of scams. If it is targeting a business, I think they are relying on people not really caring. It is just a job, they don't treat me good, so why should I care, etc. Another reason for companies to treat there staff well. If people actually care about there jobs, and/or their work and the people around them, they would be more cautious. Not that they are willingly allowing it to happen, just that they don't care enough to have proper alertness.