I quit reporting any emails at my job. Reported one from an outside source once, but it wasn't technically a phish. So I received mandatory online safety courses for "wrongly reporting a phishing scam". Which was the same courses I was already forced to take a few months prior. I was pissed.
That's gotta be one lazy IT team or a terrible training firm, if they're expecting training to "solve" phishing, at the cost of causing security fatigue on users.
What a terrible policy.
In my firm, we never raise a fuss over someone suspicious of phishing, because it's our job, not theirs.
If anyone was actually reporting so much that it's impacting firm time, yah don't sign them up for training, we just talk to them.
Me: Reports every email. Can never be too sure
Our phishing test emails have a special header so they are ignored by the spam filter.
I created an email filter that checks for this header and sends all emails with that header into the spam folder.