1) Send a email from a bank saying that
Internet account suspended, too many failed login attempts.
in the intrests of security the password needs to be changed so that it is not a single word, and it must contain numbers and letters. Say that you sould manualy type in www.bank.com or click the link (but the link takes the pleb to the scammers site), the scammer then relifes the pleb of there old password and post code, and make them think that they changed it...

2) Send the pleb, a email that looks like it is from a internet dateing site with a picture of some gorgous girls that live in there area (you got there post code), when they sign up...