When someone sends you an email, by default you just assume it’s fraud - Walter Wallis
As IT, I like when i get emails from Co-workers who forward me their spam emails that made it thrugh not just Microsofts detection, but Proofpoints as well and came out “Clean” but is obviously a phishing email. I wish some people would ignore their emails more often…
I quit reporting any emails at my job. Reported one from an outside source once, but it wasn’t technically a phish. So I received mandatory online safety courses for “wrongly reporting a phishing scam”. Which was the same courses I was already forced to take a few months prior. I was pissed.
Your security team sucks. Users should be encouraged to report anything sus, even if it occasionally results in a false positive.
