If you require evidence that any individual, including professionals working in cybersecurity, Troy Hunt has an extensive, detailed narrative on his site regarding his experience with phishing. Definitely worth a read.