Update: I ran my own fake phishing email on 6 coworkers and only 2 clicked, but not the 2 I expected
I sent a fake "benefits update" email from a made up address to 6 people in my office in Columbus last month, just to see what would happen, and 2 of them clicked the link. The funny part is the two who clicked are the same people who always brag about spotting scams. I learned that confidence is a terrible way to measure who is safe, so now I want to run a real training drill with approval from HR. Has anyone set one of these up at a small office without making everyone hate them after?