Why would they have any reason to doubt? The majority of people haven't received enough of the right kind of educational instruction to recognize even a basic scam on the phone or in email, let alone a scam that required the sophistication and technical understanding of this one. Personally, I have to wonder how hard of an exploit it was for hackers to get in...And how often this is going to happen.