Or, you could use a catch all email address to give every site their own unique email: sitename@yourdomain.com. More outlined here: http://www.mooreds.com/wordpress/archives/219

Then you know who is selling/losing your email address. And pipe those particular addresses to /dev/null