Companies that provide anti-phishing training justly claim to significantly reduce the numbers of clicks on phishing emails. But while they succeed in achieving their goal, they do NOT achieve what companies hire them to do -- prevent the success of phishing attacks.