I own a website, say widget.com. I've been receiving complaints from people recently on how they were being spammed by us. Turns out that various junk email addresses are being used that contain my domain name to send spam all over. e.g. abc@widget.com is the most recent that I've had a complaint about and this email account does not even exist. How do spammers do this and how to I prevent it?