The KnowBe4 console marks a user as having clicked if the unique URL assigned to them from a specific phishing campaign is accessed. It can be accessed by a human or by an automated process. Using the Google native reporting tool will cause that message to be forwarded to Google for investigation. Part of that investigation process typically involves visiting the links which triggers the click failure for the original recipient of the message.
Whitelisting only protects the message on the way into the user's inbox. If the message makes it to the user's inbox without triggering a click failure, then the whitelisting is probably set up correctly.
Google does not openly share its spam/phishing investigation criteria and we do not have any documentation on how to prevent false positives from using their native reporting tools.
Would it be possible to avoid investigating the links in the emails reported as phishing whose domain is psm.knowbe4.com ?
LinkedIn
Twitter
