Educate your customers.

One of my clients (major investment firm) sent out letters to all their customers telling them that they NEVER call or email customers to ask for personal info. The letter explained identity theft, phishing scams as well as a list of recommended actions to protect your ID. Suggest you do something similar.