It seems that every day I get some spam that intimates that it is from a major corporation and that my account has been compromised. I report almost every one of these to the spoofed corporation (if I've found an email address for such) as well as to the Federal Trade Commission (spam@uce.gov) and the Anti-Phishing Working Group (reportphishing@antiphishing.org).
Sometimes it is hard to find an email address for a spoofed company. Somewhere on a home page or a help page you might find a link to spam, spoof, phishing, fraud, or security.
You might think that it is a bit of work to report spoofing, but consider it like calling the police when you see suspicious activity around a neighbor's house. Consider also this statement that I received from PayPal after reporting a phishing message:
Every email counts. When you forward suspicious-looking emails to
spoof@paypal.com, you help keep yourself and others safe from identity
theft.
See also my blog entry Phishing against which bank this week?
