Its often the most basic lapse in security that lets someone in, sometimes even physical security, the best way to fight this is awareness. Many companies now send their staff fake phishing emails to educate, so that people have their guard up when they receive an email with dubious intentions. The more we can do to increase awareness the harder it will be for fraudsters to take advantage of the community.