It may take a long time to "get" someone, if at all. They maybe in some country where its next to impossible to lock them up. Forwarding to Spoof mail, though, should shut down their activities. This is why I always do it. Here is my response from Paypal:
"Thank you for bringing this suspicious email to our attention. We can
confirm that the email you received; was not sent to you by PayPal. The
website linked to this email is not a registered URL authorized or used by
PayPal. We are currently investigating this incident fully. Please do not
enter any personal or financial information into this website"