Probably put their email address in your signature on a messageboard. There's enough dodgy bots crawling round these sites (judging by the amount of them I see on the GG board)
