I still do the Spamcop thing diligently. Heck if I know whether it does any good, but it's not a big effort and if it helps in a few cases, why not. A surprisin

I still do the Spamcop thing diligently. Heck if I know whether it does any good, but it's not a big effort and if it helps in a few cases, why not. A surprising amount of the spam and phishing mails I get come through major providers: Gmail, Amazon, Outlook, Sendgrid, etc. – I'd hope they actually do something (getting blacklisted can still be a very costly thing, I heard). I also report all phishing sites I find to hosts, domain registrars, and Google+Microsoft blacklists. A similar service to Spamcop for that purpose is Phish Report. There, it's a bit easier to measure success. A surprising number of hosts are very quick to kill reported sites. As for the blacklists… when I report ridiculously obvious phishing sites such as PayPal logins hosted on "verify-paypa1.business", usually the site is blocked on Edge around 15 minutes after I report it to Microsoft, but is often still reachable without warning on Chrome two or three weeks after I reported it to Google…