An integral part of winning new customers is their confidence in your expertise, and the best route to becoming an expert is learning by experience...
For further actions, you may consider blocking this person and/or reporting abuse
Avoiding phishing attacks are pretty hard if the attacker does well and writes convincing material. And if it is convincing, it's not often people will check the links to make sure they're authentic (especially from what looks to be a trusted source).
Phishing can be hard to prevent(as far as I know) and can be effective against people who are really busy, getting a lot of things done and not wasting time checking the links.