There's a menu bar for the entire email chain, and an "Actions" button for each mail message. Report Spam is only available in the former, and Report Phishing is only available in the latter.

I agree, it's annoying! Maybe someone at Fastmail will see this.