cybercriminal activity

I continue to get a lot of emails that say I won in a lottery, or that my bank wants to verify my details, or that a friend lost his wallet and is in dire need of cash to come back hoome. Phishing remains a common form of deception that email software can't filter out. Why?