My work sends out fake phishing emails and the people who click them get in trouble. Of course, they always come from one particular address that I blocked.

I wish they'd do more realistic emails though. "You won a prize you didn't apply for!" is pretty basic. If it was one of those fake invoice PDFs I always get on my personal, I'd totally let a trojan onto the work network.