Some years ago, I was working a contract job for a Fortune 500 company. Their IT group would do periodic on-line security pointers. One time, the lesson was to not open links in e-mails or texts from unknown sources. A couple of days later, they sent out a test text from some weird site. 80 or 90% of the employees that had taken the training fell for it.