It's not down to luck. If you maintain good habits and personal processes you will not fall for this. "Everybody gets phished" is overstated.