Hostile hackers are plentiful these days. My IP address gets "probed" so many times a day that I've turned off logging. I'm sure most of the source IPs of the probes are spoofed anyway.
Until I installed the callblocker, I was getting regular phone calls from "Microsoft" in India to tell me about the problems in my PC which they could fix for me. I don't know anyone who hasn't had the call - there must be thousands of staff in the phishing call centres.
I use a different e-mail address for banking from those I use for other purposes, which separates the "probably genuine" bank e-mails from the "definitely a scam" e-mails.
Must go: there's a nice lady in Benin wants to transfer $2,500,000.00 to my bank account.
Hey mixture - I've never thought of testing pens as a way to stop hackers. I must try that some time. When I worked for a living (last century), we had a team of devious folks who were encouraged to try to break system security in their spare time.