A tiny Upstate county’s $1.5M phishing fail reminds us all that all it takes is clicking on one link without triple-checking or believing one email to wipe you out, or squander taxpayer money.