Unless you encrypt your mail, or host it yourself, you can't really stop things like this from happening. Nobody can set up a perfect hiring process that screens 100% of creeps like this.