You report the phishing email to the provider associated with the fake address. They acknowledge receipt and open an investigation.
It's unclear whether action will be taken, but at least you flagged it.
"Every report strengthens the digital immune system."