While these tests can be useful, they also give people a false sense of security:

For example, hovering over links doesn’t help. They can redirect many times before reaching the destination. And it’s virtually impossible for a person to detect a legitimate URL with the naked eye. People need to be told that emails will come from people that look legit and it will include links that look legit.