The company I work for has lots of training to recognize phishing attempts, and then they proceed to send emails that tick most of the "avoid this" boxes.