I use Qcontacts on my contact pages as it has a captcha component to stop bot generated spam. I noticed that from one of my sites I was starting to get spam - turns out they were using the Joomla contact component as I'd once set it up before I started using Qcontact - solution was simply to uninstall the Joomla component - then the spam stopped.