True, but when it becomes almost inexpensive, it will pay off even with a low success rate. You would be impressed with how simple some social engineering schemes are.