Spam email campaigns cannot do any damage without manual intervention by users who are encouraged to perform certain tasks