I think fake phishing messages over the same channel real ones would be in are the way to go.
would love to get your feedback on it :)
We are also aunching a free-program for 10 orgs on our Enterprise plan --> https://docs.google.com/forms/d/e/1FAIpQLSc5nl1K8IQWuvoR_6PH...