My work does these every so often. They're easy to spot because they send them from SalesForce, so all you have to do is to hover over the URL and ... oh look, our IT department are at it again.
Still, reporting them to the helpdesk always earns you brownie points, so I'm not complaining.