At my work, the bogus phishing attacks are overly believable. They'll even come from a known in-house email account.

I've been dinged twice while otherwise occupied. I've stopped checking my email altogether. Play stupid games, win stupid prizes. I am being paid to do a job.