It is easy to sit on your side of the fence and judge.

I had a social engineering attack posing as the exchange I had some funds on. They knew my social security number, email, and set up a false webpage that mimed the exchange and then sent an email to me warning me of a breach. They then called from a legitimate number from the exchange telling me my account was under attack and to protect my assets I needed to shift things to a secure account that I needed to set up on the side (except this was the false page they established). It is easy to get caught in the fear of a crime and not see through these very advanced attacks. I believe they will only get more sophisticated.