Why does the report show clicks on a phishing campaign when no one actually clicked?

This issue may be caused by your organization's "safe link" settings. Some security solutions, like Microsoft Defender, automatically click on links in emails to verify their safety. This can result in false-positive clicks being recorded in your phishing simulation report.

To prevent this from happening during phishing simulations, you can adjust your settings. Here’s an article from Microsoft that explains how to stop ATP (Advanced Threat Protection) from clicking on links:

How to stop ATP from clicking links in phishing simulations.

Please note that the exact filters and settings may vary depending on your organization’s security setup. Adjusting these settings should resolve the issue, ensuring your reports reflect actual user behavior.