Not everyone is aware of this, but they should be.
We all get 'phishing' emails on a regular basis. At least I do; they're easy to spot. Often it will be from "paypal" or "XYZ Bank" or whoever, asking for you to 'click here to verify...", etc.
From now on, when you get one of those, forward it to the company being phished for. For example: If it's a Paypal scam, forward the entire email to firstname.lastname@example.org. Same goes with banks, etc. Spoof@xyzbank.com. They appreciate it and every email helps.