If they're using your email, I'd suggest the first thing you do is change the password on the account. Pick a good password - at least eight characters, at least one capital letter, at least one non-letter character, preferably nothing that's easy to guess from your name, your family, your background, search history or anything else like that. Some suggestions I've seen for making passwords harder to guess are using the first words of a sentence of something like that.