OK, the issue here is not JUST wireless, it is her whole security and education with technolgy that needs addressing.
Firstly, she must have a full virus and malware protection system in place. It is not enough to simply put a virus checker and have done with it. The Windows firewall is OK, but there are others that are better (McAfee, OneCare, to name a couple). Again, it is not enough to simply put these on and forget them, they need constant and daily updating.
Next, she must have an anti-SPAM and anti-Phishing application installed on her system. The phenomenon you mentioned was a phishing e-mail which virtually everyone on e-mail gets at some point or another. A SpamSystem would have flagged this accordingly and you would not have had the problem.
Lastly is the use if her credit card by an unauthorised person(s). This can be through a number of methods - not least of which is the good old telephone. In today's society, you MUST buy a shredder and use it. Nothing with any address, name or personal information must be left in tact if you are throwing it out. Shred everything, cut up cards (and dispose of parts in different bins). On your PC, if you have a decent anti-malware suite you should be protected but ONLY if it is kept up to date. An out of date system is useless.
SHARK!
For every positive action, there's an equal and opposite government plan.