You can't stop the spoofing,
but you can stop a lot of spam by setting the default email address to :fail: in cpanel > default address.
and just use real address and set forwards for sign ups to forward to a real address.
Then if you get spam with a forward address, delete it.
Read more in Protecting Yourself From Spam, What can you do?