As long as humans have access to email, phishing will work