I often forward them to the phishing address but some get rejected and returned to me saying 'suspicious attachment'= so what's the point. I am not convinced they can do anything anyway. Some companies have stopped having a reporting address and their site just says 'delete it without opening it or any attchments'