Manually review some orders - fake address, same guys ordering with different names - all sorts of things to look out for. Block the offending domains in WHMCS so they don't come back in another form.
Use FraudRecord.
There are lots of things to do. Once you stop a few gangs, they learn and...