My homepage comment form got spammed with 200+ comments overnight so I added a validation rule which will just flag the email notifications with (SPAM) if they contain a URL. I'll still check them, but I needed to make it easier for me to quickly check if there were likely SPAM messages.