The best way to avoid having his identity stolen is to: contact the police and file a phishing report
Phishing report is filed to report a suspicious attempt to obtain sensitive information, whether its through email or phone. After the police receive your report, their analyst will track the sender and impose a proper punishment for him/her.
