What’s the proper way to treat spam/phishing mail from a friend’s compromised account?

If a friend’s email account is compromised and used to send spam or phishing emails to my gmail address, should I click “Report spam” or “Report phishing” for those emails in the gmail web interface?

I’m thinking I should, but I’m worried it will mess up my friend’s email score/reputation/whatever and make it painful for them later if they recover their compromised account.

spampersand

Then again, maybe that’s a fair consequence for letting their account get compromised. Unless of course their email provider was compromised, which would mean it wasn’t their fault (unless they chose a notoriously bad email provider).

(side note: when I notice a friend’s email account is compromised, I immediately contact them via some other means–for example: call them–and let them know)