How do you handle phishing prevention without frustrating your team?

We’ve had a few close calls with phishing emails lately, but long training sessions just don’t work well, they’re time-consuming and people get frustrated.
Does anyone know of quick, easy tools or tricks that actually help change habits without being annoying? Would love to hear what’s worked for you! 😃