In moments of distraction I've had a couple of near-misses where I nearly clicked on malware.
But when I'm trying to explain to my dad how to know what to trust and what not to trust I realise it's completely hopeless. You can fake almost everything that a non-techie would know to check.