I work at a digital marketing agency that does search and display advertising. One of our clients got in touch with us through the sales team that their website had been tampered with through a Russian email phishing scam. 

Client: Is there anything you can do to keep this from happening in the future?

Anything that the guys running your online advertising can do to prevent you from falling for email scams? Not really, no

Source: Clients from Hell