1. A method, comprising: receiving a notification that a message has been identified by one or more individuals as a possible phishing attack, the message having been received on a computing device of each of the one or more individuals; determining whether the message is a simulated phishing attack; if the message is determined to be a simulated phishing attack, providing feedback to the one or more individuals that correctly identified the message as a possible phishing attack confirming that the message was a simulated phishing attack; and if the message is determined not to be a simulated phishing attack, determining a trustworthiness level for each of the one or more individuals; and processing the message based on the trustworthiness level of each of the one or more individuals.