Most banks and such type institutions have an email address now that you can forward the fraudulent emails to and they look into it. It's usually something like spoof@scotiabank.com or somethin' along that line. If you call the bank in question or look up their wedsite, you can get that email address. Forward yer phishing and fraudulent emails to them, and they will follow up on it.