One explanation of phishing success lies in a known psychological effect.