Imagine your bank telling you that your online account was hacked and that you had to reset your access credentials. You click on the link provided in the email, and it leads you to a spoofed password reset page. Without checking if the email actually came from your bank, you go ahead and enter your current credentials to reset your password.
Most likely due to their sharp focus in making their small- and medium-sized businesses (SMBs) grow, business owners and managers are likely to view email only as a communication tool. That is, they tend to not think about the dangers of using email — or if they do, they just shrug these off as the problems of much larger corporations.