Please forgive me for tagging on a similar story...
At a former job my CIO was patting himself on the back because he'd just forced everybody to sit through an hour of blather about "smart computing" - including what to do / not to do with solicitations like the OP’s. He made us skip lunch for it. I bet him a taco that at least half of them had tuned him out.
To prove it, I sent everybody an e-mail with an attachment. I used a made-up account with a very suspicious name (“Nigerian Prince”) and the attachment was executable (with the obvious extension .exe). I said something like “Please open attached file so can collect data from you computer.” It was purposely written to set off warning signals from the CIO’s lecture. What the file actually did was make me a list of everybody who opened it – the user didn’t actually see anything happen.
Sent it out and we waited. By the end of the day almost half of our people were on the list. By the end of the week it was close to 75%. Some people opened it more than once. We were surprised – I only expected about a 10% hit rate and assumed I’d be buying the tacos. Best taco I’d had in a while.
Sometimes you can train people, but not by forcing them to attend a pompous lecture during their lunch hour.