Most major places like banks and financial institutions have a place to forward the scam or "phishing" emails. For example, Wells Fargo says this: Forward the fraudulent email or information to reportphish@wellsfargo.com. and Yahoo email says this: To report a phishing email, please forward the email to phishing@cc.yahoo-inc.com I always do forward any I receive. The legitimate companies can get those fake sites shut down pretty fast.