Are you sure the phishing mail is coming from your site ?

Or are they just using your site name/address/whatever as their "beard" ? (Faking it.)