That is common to for spammers to find an address that answers to callbacks on
anyword@thedomain.tld, and start using it like there's no tomorrow. And for them, there is no tomorrow because we seriously considering disableing catch all email addresses completely.
There is a total outbreak this month of spammers forging return addresses because they have to. Receiving servers have been switching over to callbacks for the past 6 months - that is, not accepting an email from the sender until they take the sending address and try
calling it back to see if they are an actual email server. We did it (callbacks) for a while, months ago.
When a domain sets their email up to say yes to ANY
word@domain.tld the spammers, once they find a domain doing that, now have a fake return address they can use. One that will answer to call backs instead of ":no such user"
Long story short, there's no way to stop someone from forging your address, aside from doing what you just did. Eventually it will be worthless to them.
You cannot be blamed as the spammer by anyone because the spam didn't originate from our network. What could happen though - if there is an autoresponder set up to respond to spam, eventually one of those spams will be returned to someone whose email address was forged, they will turn you in, and most ISP's would regard you as a spammer, including our ISP (level3). We would get a nast letter from them and have to get all posturish and threatening at you.
Not meaning you personally. I have no idea if you have an autoresponder set up. This is just for the sake of the achive of this post. We have had a couple complaints from level3, and they aren't fun. They go a
little something like this "We've found out you are breaking your terms of service, and you have 6 hours to tell us why before the fiber is cut".