I set up a new email alias that forwarded to my main email, however whilst the official Shopify now use this email the spam still comes through to the original email address. So not really much that can be done about it as it won’t be hard for a bot to work out names of people involved in the company and guess their email addresses.