Half the people here immediately deleted some survey about the work climate or something done by an external provider and didn't even question it because it was so obviously a phishing mail.

I just ignored it thinking the same. Until my scrum master told me that we should please all answer that survey.