You can do it but don't tell them you're doing it. Either they don't bite, nothing needs to be done, or you hook them. Don't tell them, but now you know what wo

You can do it but don't tell them you're doing it. Either they don't bite, nothing needs to be done, or you hook them. Don't tell them, but now you know what works. Next, educate them through normal channels, or change something about your communication with the client that makes them recognize the phishing attempt next time. Change something to make them phishing attempt stand out more.