Babysit them more. Locked down account so they can't install stuff, better yet Linux so random stuff from the internet or malicious email attachment have a very high chance of not being for their platform.

And then just train them to forward any email that they can't identify as scam themselves right away to you.