There's definitely a spectrum. Plenty of examples of people getting hurt through no fault of their own, and I would never assign blame to them. You're out walking your dog and get mugged--you did nothing risky, so you get no blame. But when you decide to do something risky, like skydiving or running in traffic or sending your government ID over the Internet (!!), and you suffer the known and anticipated downside risk, you need to at least share some of the blame. On the other side of the spectrum, if someone buys a penny stock and it loses all its value, that guy gets most of the blame.

Some other reply posted "Victim blaming!" as if that shuts down the discussion. It shouldn't.