Make sure that you dont have a 'catch all' email account and if you have a specific email address being spoofed constantly, have your host automaticlly delete it from the server

Thats what we did

Regards,

Lee