Just find out how the spammers are getting a hold of affiliate email addresses. No they are not guessing them (the spammers are not guessing
[email protected]), they are either hacking into some DBs or someone's selling/leaking the addresses... start from there.