One of the most common #infosec discussions I have with family members is about phishing and how to stay vigilant against it, like:
"no, your bank will never send you an e-mail like that"
"no, the CRA will never make a phone call like that"
"no, Apple will never send you an e-mail like that"
"notice the typos in the e-mail, its fake"
"don't click any link, go directly to the site the e-mail is supposed to be from by typing in the URL"
etc.
@staticsafe I never had to learn these things explicitly. Rather, I just learned to recognise patterns. I'm told that the phishers deliberately add those typos and suspicious things to emails because they're not trying to fool actual smart people. They want the dumb or gullible ones who aren't smart enough to understand that "Dear sir or madam" would never be the greeting phrase in an email from Apple, and that Apple would never be inconsistent about fonts or mess up the layout.