You're the Google Workspace Administrator for a company and notice a sudden spike in phishing emails that bypassed your existing security measures. Users are receiving emails that appear to come from trusted internal sources asking for sensitive information. What is the most effective immediate action to identify and classify these phishing emails?