The useful lesson is usually contextual
A generic warning about suspicious email is easy to agree with and easy to forget. People need to recognise the moment a request looks plausible because it mentions a current project, a familiar supplier, a senior colleague or a routine payment process.
Well-designed simulations and short awareness material can make those moments visible without pretending there is a single trick that identifies every dangerous message.
Measure support needs, not embarrassment
A simulation is a signal about where people may need more context or a simpler process. It should lead to focused follow-up: a short explanation, a practical example or a chance to ask a question. It should not become a public scorecard.
That approach produces better information for the organisation too. Repeated patterns can point to a high-risk workflow, an unclear approval route or a message type that needs stronger filtering.
Awareness belongs with the rest of the controls
User awareness is one layer, not the whole answer. It works alongside email protection, strong account controls, access review and a service team that can investigate quickly when something does not look right.
The strongest result is a workplace where a person can pause, report and receive a helpful response without worrying that asking was the wrong move.