This one is quite common - forward it to
[email protected] - they claim they investigate them (but I find that doubtful).
And yes, even a small percentage being successful would make it worth the scammer's while, unfortunately (say they send out 5 million, if only one person in ten thousand falls for it, that's 500 bank details they've trawled)