Here's an interesting article on the reasons that people get taken in by phishing (in PDF format):

Why Phishing works