My approach with those and with bank phishing emails recently (if they manage to get through my spam filter) has been to find the ISP where their web pages are hosted, and forward a copy of the email to the ISP's "abuse@" email address. Sometimes I get an email back to acknowledge it, and once they actually told me they'd suspended the domain. It got to be worth a try.

Anahata