320/1000 people know someone stupid enough to fall for a scam.

Correction: 320/1000 people know someone unlucky enough to fall for a scam. Plenty of very smart people fall for scams. All it takes is some lucky timing on the part of the scammer, where enough happens to be correct that they miss/overlook whatever tells might be present until it's too late

This risk increases significantly when users exchange credit or debit card information to view content on unregulated and illicit websites.

I mean, providing payment information to legitimate services is always a risk. There's so freaking many breaches that you simply have to assume your card will see fraudulent charges sooner or later and watch your statements for the unexpected activity so you can stop and reverse the charges before you miss the deadline