So we're having phishing awareness training at work...

A few months ago, the IT Security guys sent hundreds of members in the company a simulated phishing mail to see how many would fall for it.

43% not only clicked the link, but also gave their company login information.

Since then, they've started a phishing awareness program that's been running since then. Occasionally, random people get another simulated phishing email. In the entire IT department, which I'm part of, only one person has never fallen for any of these simulations: me (except the guys from security, of course)

I told them that I'd bring cake for everyone if I ever fall for any of simulations. They asked me how I manage to never get caught off guard.

Shall I tell them I'm used to scam attempts because I'm into crypto and it's the fucking Wild West here? Be like me: I treat every email/message I get as one should in crypto: everything is guilty until proven innocent. Will I miss messages that aren't actually a scam? Perhaps. But if it's important, they'll contact me personally.

Anyone else became hyper-vigilant for scams and phishing thanks to crypto?