I get spoof mail all the time for 
eBay & PayPal.  They are getting good at it also.  I got one for PayPal the other day & it even had the P icon in the address bar.  The email looked very legit & other then a few of the links not being clickable it was a good knockoff.  I normally go into there directory & see how many people gave them there info but this one was password protected.
I got a 
eBay spoof one time & after contacting about 60-70 people that I got there info from the spoofer I decided to contact 
Ebay & turned over the thousands (& I do mean thousands) of user names & passwords I had take from the site.  They didn't contact one of them but they did shout down the site.
Out of the people I contacted & reviled there user name & password to them so they know that they had been scammed only about half changed there passwords & none sent a thank you for me saving there 
eBay account from the scamers.  There was even one girl that had 5 
eBay accounts & sence she couldn't get in with one she used all 5 about 5 times each.  I was inside of a lot of accounts where I could change shipping info, buy, or even sell from there account with payment going to me.  
I even had the account of the big time seller that they was defrauding to spoof others.  No thank you from the 10000 star power seller ether.
Is it really worth the time invested to shout these people down so the ungrateful suckers don't get hurt?
I normal get to help shout down three or more sites a week but I don't try to keep up with all of the suckers info & contact them anymore.  It is just to much work & I'm sure it is illegal for me to go in there account to get there contact info even if I am trying to do a good thing.