re: "Phishing"
Almost every legitimate website/organization has a specific e-mail address to which you can forward fake e-mails appearing under their name. I do this routinely. Hopefully, some heavy legal action will eventually result.
