Most phishing scams required the target to have an emotional reaction that clouds their judgement. For example, if you get an email saying that your credit card was charged in another state, if you are worried about your finances you may panic and click on the button to login and deny the charges.