Email addresses are irrelevant, unless the spammers are stupid enough to give you a valid reply address (like "write to sales@idiot.com for a catalog!"). The name of the game in spam-busting is the Received: headers.

Track the spam back to the SMTP server it was sent from. Do a WHOIS on that domain. Email the listed sysadmin, as well as abuse@that_domain.com and explain how open relays are just like letting spammers steal their money. Also:
  1. If they list a web site, WHOIS again and send more email. If they own the domain, TRACEROUTE and do recursive WHOISes until you find their provider.
  2. If the URL is a weird 10 to 12 digit decimal number, convert it to 8 digits of hex, break the hex into 4 parts, and convert the parts back to decimal to get the real IP. Then DNSQuery on the IP.
  3. If they have an 800 number, call them repeatedly and waste their time.



Source: Posted by "Frankie" on http://slashdot.org/. Post attached to Spammers Hit Wireless Phones | 04/12/2000