1. A method comprising: receiving, at a virtual machine associated with a particular user, a notification from a mobile device associated with the particular user identifying that a message received at the mobile device is determined to be an unwanted message based on: identification of the message as a potential unwanted message by an unwanted message detection algorithm; and the message being confirmed by the particular user to be the unwanted message in response to presenting the particular user with the message, the message presented with a date and time the message was sent highlighted to indicate that the date and time were considered in identifying the message as the potential unwanted message; transmitting information pertaining to the notification to a global virtual machine; receiving an updated set of global classification rules from the global virtual machine, the updated set of global classification rules based on information pertaining to the notification, information pertaining to notifications from a plurality of other user devices associated with the global virtual machine, a number of users that identified a particular message as unwanted, and information pertaining to training messages; updating, at the virtual machine, a copy of the unwanted message detection algorithm associated with the particular user, based on the notification, the updated set of global classification rules, and a set of personalized classification rules, the updating to generate an updated copy of the unwanted message detection algorithm; and transmitting the updated copy of the unwanted message detection algorithm to the mobile device associated with the particular user.