How do you actually stay safe from phishing these days?

Ok so phishing scams feel like they're getting way too smart lately. It's not just the obvious sketchy emails anymore, now it's texts, fake login pages, and even weird stuff on social media. I work in IT and I swear it's like every week someone in my company clicks on something they shouldn't. We have training and tools, but it still happens. What are you guys using to actually protect against all this? Is there something better we should be doing, or is it just