Security experts reveal how easy it is to get fooled by this scam and what to do if you think you've been targeted.