We've always had a problem with spammers using the private message system. It takes some work on their part, but they can just PM people individually...