[heavenlyblue]

> Like for instance FBI [1], when they were sending their informants to mosques in US looking to recruit terrorists. Up until the the members of the mosque ended up reporting the FBI agents to the FBI.

I am not saying what FBI does is good, but this reminds me now that the only way to deal with constant threat of phishing is actually to create false fishing attacks all the time, so that people would be aware of the thread. Could be generally a good approach if the methods employed were more public rather than clandestine.