There is the wrong way, and the Phishme.com way. cheers!

Same thing Mike Zusman did at presented about already at BlackHat/Defcon a couple of years back. Can't believe it's STILL going on. When will these companies learn.

People need practice spotting real, highly crafted spear phishing attacks. These emails are MUCH more specialized then spam. The DOJ isn't the first to use this education technique and they won't be the last. Organizations pay for this training. Just look at www.phishme.com.