It's not your password—it's your brain. Understanding why we fall for scams is the first step to stopping them.