Re: But isn't this what (real) criminals would do?
As above, while I can see this would be extremely annoying to the employees, it *is* the sort of thing criminals might try, so they need to be aware. This kind of test is actually a good way to check if any training you offer is working.
Biting the hand that feeds IT
