Weirdness is a clue about fraudulent email messages. But it takes more than a sense that something’s wrong to get people to investigate