I recently changed my email address, about 4 weeks ago.
Previously I did not have any email notifications enabled. This time when I added my new email address Ive inadvertedly enabled the notifications, Im also getting the Nigerian scam spams.

I guess the most simple answer is for me to turn off all notifications & see if the spam is still coming through, especially as no-one yet appears to be able to pin-point where the issue is at source.

I check the site daily anyway...lol :)