Does clicking on a phishing email automatically move a user down a level?

Yes. Clicking on a phishing email causes the user to move down one level within that specific phishing category.

CyberNut tracks progress per attack type, meaning a user could be at different levels across categories like “Reward Scams” or “Deceptive URLs.”

Consistent clicking lowers levels; consistent reporting raises them.