"Although users are constantly trained and instructed on how to identify and report phishing emails, the reaction they receive in the actions taken—or, more often, not taken—by the companies to which they report creates anegative feedbackthat discourages them from reporting future emails," said...