The reporting system does not require flagging. Perhaps that's the snag you're hung up on. Whether people flag or not, they can simply report the link as suspicious. Once enough folks have reported the suspicious link, attention from more eyes will likely enable flagging.