Be compassionate when your users get phished. If it can happen to the Director of the FBI, it can happen to anyone.
@accidentalciso Yeah, especially when any fool can be put in charge of the FBI!
@accidentalciso It is a good occasion for building a positive relationship with the user. Be understanding, but clear, and tell them they can always ask you if unsure.