noted for my phishing business: track first phishing attempt, send follow up email two days later saying the first one was legit.