script or application to mass delete phishing email

How do other IceWarp host handle removing phishing emails from user mailboxes or do you? Once we receive any that spam filter doesnt catch then we blacklist but if it delivers to others then we would like to remove the emails before someone who thinks its us saying they need to change there password clicks the link.