Here is an excellent article on the response taken by a bank (whose identity is kept anonymous in the article) to a Phishing attack.

(Link courtesy of beSpacific)