You say PayPal doesn't do anything, but that is incorrect. When you report these scams to spoof@paypal.com (and eBay fakes to spoof@ebay.com), their security departments arrange with Internet providers to take these fake sites off-line, usually within hours. Of course, they can't prevent new fakes from being sent (since no company or agency has the power to screen all outgoing e-mails), but once they're sent the companies can shut them down before too many gullible users make the mistake of clicking on the link and entering their personal data.