Unless you're teaching them, your users will fall for phishing attacks.

Microsoft 365 attack simulator, a tool for testing & promoting awareness by simulating real-world phishing attacks.  No matter how secure your organization is, users remain the biggest security risk. It would be wonderful if you had a tool to test and educate using real-world phishing simulations. You definitely want to have a tool to test and educate users about phishing attacks, because users are the number one security risk. 

Learn how to https://www.gitbit.org/course/ms-500/learn/Simulating-attacks-with-Microsoft-365-GG4cMY8pK.