---
title: "Now We Know Why You Can’t Depend on Awareness Training to Stop Phishing Attacks | DuoCircle"
description: "It’s been shown repeatedly that all the phishing awareness training in the world won’t get the click rate on malicious emails down to zero. And now we know why."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/"
---

Quick Answer

Phishing awareness training never gets click rates to zero because employees knowingly ignore security guidance. A Symphony Communication Services survey of 1,569 US and UK collaboration-tool users found 24% are aware of IT security guidelines but don't follow them, 27% knowingly connect to unsecured networks, and 25% share confidential information through Slack, Teams, or Skype. Generational data shows Millennials are 2x to 3x more likely than Boomers to share credentials, copy company data, share company credit card or password info, or install unapproved apps. The conclusion: trying to train your way out of phishing has a hard ceiling. Cloud-based email security with real-time link click protection moves the burden off the user.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Now%20We%20Know%20Why%20You%20Can%E2%80%99t%20Depend%20on%20Awareness%20Training%20to%20Stop%20Phishing%20Attacks&url=undefined%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F&title=Now%20We%20Know%20Why%20You%20Can%E2%80%99t%20Depend%20on%20Awareness%20Training%20to%20Stop%20Phishing%20Attacks "Share on Reddit") [ ](mailto:?subject=Now%20We%20Know%20Why%20You%20Can%E2%80%99t%20Depend%20on%20Awareness%20Training%20to%20Stop%20Phishing%20Attacks&body=Check out this article: undefined%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F "Share via Email") 

![Phishing Attacks](https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7365.jpg) 

It’s been [shown repeatedly](https://www.knowbe4.com/resources/point-of-failure-phishing-training-does-not-work/) that all the **phishing awareness training** in the world won’t get the click rate on malicious emails down to zero. And now we know why.

Thanks to [research](https://www.darkreading.com/threat-intelligence/1-in-4-workers-are-aware-of-security-guidelines---but-ignore-them/d/d-id/1334492?%5Fmc=NL%5FDR%5FEDT%5FDR%5Fweekly%5F20190425&cid=NL%5FDR%5FEDT%5FDR%5Fweekly%5F20190425&elq%5Fmid=90687&elq%5Fcid=28171904) conducted by Symphony Communication Services, “_An alarming percentage of workers are consciously avoiding Its guidelines for security._”

“The report is based on a survey of 1,569 respondents from the US and UK who use collaboration tools at work. It found that 24% of those surveyed are aware of IT security guidelines yet are not following them. Another 27% knowingly connect to an unsecure network. And 25% share confidential information through collaboration platforms, including Skype, Slack, and Microsoft Teams.”

[![IT security](https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7366.jpg)](https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7366.jpg)

The feeling, according to those who cover security, is that some employees see security as an impediment to doing their jobs and when push comes to shove, they ignore security to get their jobs done. No wonder awareness training is never 100% effective.

As things turn out, attitudes toward security depend on the employee’s age. For example, the survey found that, compared to Baby Boomers, Millennials are:

- 2x more likely to share confidential information over messaging/collaboration apps
- 3x more likely to download sensitive info or intellectual property from their companies
- 2x more likely to talk badly about the boss over chat
- 3x more likely to share company credit card or password information
- 2x more likely to gossip about co-workers
- 2x more likely to download a communications app not approved by IT

[![ cloud-based email security](https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7367.jpg)](https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7367.jpg)

Whether your organization is based on a foundation of Baby Boomers or is overrun by Millennials, the best way to deal with employee indifference to security guidelines is to take security compliance out of their hands and shift the onus over to technology.

No matter how careless or indifferent employees are to clicking on the links in emails, you can **prevent phishing** attacks at your organization with [cloud-based email security](/email/phishing-protection) with real-time link click protection. It protects against malware, spear-phishing and spoofed domain names. There are no contracts required. It comes with 24/7 customer support. And you’ll be up and running in 10 minutes.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F) [ ](https://twitter.com/intent/tweet?text=Now%20We%20Know%20Why%20You%20Can%E2%80%99t%20Depend%20on%20Awareness%20Training%20to%20Stop%20Phishing%20Attacks&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fnow-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks%2F) Copy 

Related Articles

- [ ![AI-Generated Phishing](https://media.mailhop.org/duocircle/images/2026/04/spf-record-4522.jpg)  AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Phishing ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/)
- [ ![spf-permerror-4555](https://media.mailhop.org/duocircle/images/2023/05/spf-permerror-4555.jpg)  10 Applications of ChatGPT that Hackers Are Already Exploiting Phishing ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/)
- [ ![Email-Based Cyber-Attacks](https://media.mailhop.org/duocircle/images/2016/03/spf-record-tester-4455.jpg)  65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Phishing ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/)
- [ ![Email-based Ransomware Attacks](https://media.mailhop.org/duocircle/images/2018/02/email-smtp-service-7834.jpg)  7 Ways to Protect Your Organization from Email-based Ransomware Attacks Phishing ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/)

## Related Articles

[  Phishing 11m  AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough  Apr 28, 2026 ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/)[  Phishing 5m  10 Applications of ChatGPT that Hackers Are Already Exploiting  May 3, 2023 ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/)[  Phishing 4m  65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks  Mar 29, 2016 ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/)[  Phishing 9m  7 Ways to Protect Your Organization from Email-based Ransomware Attacks  Feb 11, 2018 ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Now We Know Why You Can’t Depend on Awareness Training to Stop Phishing Attacks","description":"It’s been shown repeatedly that all the phishing awareness training in the world won’t get the click rate on malicious emails down to zero. And now we know why.","url":"https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/","datePublished":"2019-07-02T17:03:54.000Z","dateModified":"2025-05-27T15:12:40.000Z","dateCreated":"2019-07-02T17:03:54.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/"},"articleSection":"phishing-protection","keywords":"","wordCount":345,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7365.jpg","caption":"Phishing Attacks","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Phishing"},{"@type":"ListItem","position":3,"name":"Now We Know Why You Can’t Depend on Awareness Training to Stop Phishing Attacks","item":"https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Phishing","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Now We Know Why You Can’t Depend on Awareness Training to Stop Phishing Attacks","item":"https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Now We Know Why You Can’t Depend on Awareness Training to Stop Phishing Attacks","description":"It’s been shown repeatedly that all the phishing awareness training in the world won’t get the click rate on malicious emails down to zero. And now we know why.","url":"https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/","datePublished":"2019-07-02T17:03:54.000Z","dateModified":"2025-05-27T15:12:40.000Z","dateCreated":"2019-07-02T17:03:54.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/"},"articleSection":"phishing-protection","keywords":"","wordCount":345,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/07/spf-validator-7365.jpg","caption":"Phishing Attacks","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```