I've been at a company that internally sends out fake links that log the user and links to an educational page on internet safety.

I honestly don't mind too much since it's a once a year thing (hacktober) and honestly companies should be trying to catch out employees who click any and all links.