I've had good luck reporting bank/credit union phishing to the banks as well. They tend to have processes and contacts to get things taken down quickly (including toll free numbers, etc), and I'd imagine Apple does too.

Also worth finding the scammer's hosting, and DNS services and report to those abuse contacts too.