Also if you get phishing emails, you should forward a copy to the real organisation purporting to be the sender. Most of them have special emails specifically for this purpose on their websites, usually om their "contact us page".