I know you can report phishing e-mails to the US Computer Emergency Readiness Team under the Department of Homeland Security, but does it do any good (http://www.us-cert.gov/nav/report_phishing.html)? Do they even have people handling that or does it all go to an e-mail box that never gets checked?