The Reporting feature lets your users flag suspicious emails in one click and feeds those reports back into your campaign metrics (reporting rate, time-to-report). It works the same way across email providers.
A one-click Report button is added to your users' mailbox. When a user reports an email:
When the Microsoft integration manages reporting, the report phishing policy can send reports to a customized address. The integration shows whether the policy is correctly configured:
For Google, reported messages are collected from the reporter mailbox through the Google integration (mailbox injection / DMI), so reports are picked up automatically without extra mailbox setup.
If you do not use a provider-managed policy, you can monitor a dedicated report mailbox over IMAP: