Spoofed e-mails

I am getting replies from people saying that someone in our orginazation has sent them a virus. I suspect they are spoofing the “Who” or “Reply to” field, but I want to know if there is anything on my end that I can do to prevent this?

Thanks,
Steve