We do this a lot where I work and it’s fun.

There’s a button in the email client for “report phishing link” so I’m always on the lookout.

If you report a test evil message you get immediate feedback that you passed the test.

If you report a real one the security team immediately looks at it and let’s you know if it’s legitimate or not.

I think it’s a good system.