BeeDeeDubbleU if you have access to your mail server you can apply a filter such as Spamhaus Blocklists. I have that one in between my clients and the spammers and only very small amounts of spam ever gets through. Even then it must sometimes be a human doing it via one of the website forms submissions because they are bot-proof.
#2 They know that only their fellow ignoramuses will fall for it, so no point wasting time getting the text right. After all, they don't bother enclosing the standard images and boilerplate that would accompany a real e-mail from PayPal, LinkedIn and so on.