If you have a specific email account and examples of the spoofed emails with full headers perhaps open a ticket so we can see. You might try enabling SPF or domain keys in their email security settings in the control panel.