Knowing what phishing is doesn’t stop you from falling for it. Cyberpsychology explains why we decide on autopilot and how to trigger reflection before the click.