At one of the old companies I worked at, there was a big problem with older people clicking on phishing email links.

So our IT folks decided to intentionally set up a fake email phishing "honeypot." They sent out a bunch of clearly spam phishing emails from a spoofed addresses with a link to click on to "send account details."

This link actually sent them to an educational link that explained what phishing emails were and why not to click on them. This was repeated a few weeks later, but this time repeat offenders were logged and reported to management.

It actually ended up being a pretty effective teaching moment.