Cybercrime can start with just an email trick