Name and shame. I'd be furious if I were one of the thief's tricked customers.
Naming and shaming doesn't work for such attack vectors, it's a social strategy for people that have a real identity established and are making money out of that, not for ephemeral identities of such scammers.