I just banned 23 accounts that had sent one or more spam PMs. There were less than 50 spam messages over the last couple months and were apparently manually created by the user. Each was only sent to a single person, so you should not have gotten more than a couple.

You can turn off email notification of PM messages in your profile settings.

I beefed up the security of the forum by requiring email verification on all new accounts and disabling the PM feature.

I am a little mystified because I don't see a database record of you getting any PM messages, but I am sure you aren't making it up. Must be something I don't understand about the YAF forum db structure, but it makes me wonder how prevalent the problem is.

It's a bummer there are those who waste our time with crap like this.