This is called spear phishing. Spend a little time crafting a specific attack to cause reaction they feel worried about and want to help.
You find out enough from a persons on-line sochul medier content to craft a panic. Your account has been hacked. The dog has been run over, pay the vet etc etc and uses a combination attack of SMS, email, soshul medier messages to cause a panic payment. By the time you look at the facts it is too late. The payment cannot be recovered by the bank.
Verify verify verify.
If there is not a fact you can say is cast iron then ask a question, have a safe word, test with a wrong answer and see if they respond. Have an agreement with your family that if the fuzz hits the fan they will put a well known name, word, place in the email to authenticate the issue. Not your first car, your pet, your place of birth. Too many people have answered those stupid quizzes on Farcebook and surrendered that information already.
Every time someone invents a new benefit a scumbag finds a new way to exploit it.
