Attack Simulation Training treating reporting junk as clicked message link

Question

I've run my 2nd simulation training attack on my team but I was surprised to see that this one had more users showing as "clicked message link". Looking into it I can see that they have reporting the email as junk (not phishing) and when I spoke to them they insisted that they had not clicked on the link but had immediately reported it.

I can see those that have reported it as phishing show up as "reported message".

I did a test of this myself and chose to report the message as junk and sure enough, it shows me as "Read Message, Clicked message link".

Surely this is an error?

Answer 1

Hello ChrisNScotland,  Welcome to the Microsoft community.I wish I could handle your problem, however, this question is out of reach of the response support community. It is more suitable for publishing on Microsoft Learn (English only), you can click on "Ask a question", there are experts who can provide more professional solutions in that place.Here is a link to the forum where you can raise specific scenarios and share your idea to help solve the problem.Microsoft Defender for Cloud - Microsoft Q&ASincerely hope that your question will be dealt with appropriately after contact the correct department. Thank you for your understanding! Carlos - MSFT | Microsoft Community Support Specialisto