[sebringj]

A friend of mine who isn't young but not as old as my parents is a professor and couldn't tell between a system alert and a fake one on a web page and attempted to click it just before I stopped her. My parents recently received a phone call concerning a problem about their google account and how to "correct it" in which they were very obliged to "fix" the issue and it took some undoing to get them out of that mess.

The point being...

There are training videos and certification tests for this sort of thing that are required in government related PII jobs as social engineering is too easy to fool people but its naive to think these tools will be used unless it was tied to getting a retirement check etc. I guess just hand hold them on those issue until they get it or give up?