Are you guys running your own Email servers ??? If so, you want to disable “relaying”, which will prohibit spammers from using your Email server to relay their spam Email (with origination from your domain, by the way !).
If you don’t run your own mail server, and your host service does, you may want to talk to them about disabling “relay” on thei Email server.