Thanks for the reply. I am curious to know if there is anything close to global internet law which covers such cases considering we are not in the US nor the fraud domain owner.

Taking help of our customers is actually a good idea. I am mailing them about this right now.