At least for the company I work for, to maintain our insurance, we had to be enrolled in a service (KnowBe4) that does nothing but:
1) produce shitty AI voiceover "please don't click email links" videos
2) randomly email, text, etc us with fake stuff trying to get you to click the links.
I always report the emails as phishing to Google just hoping one day something gets flagged somewhere on Google's side, but I doubt it will ever happen.