The benefits of phishing in your own pond