Email account out of SMTP Relays due to Spam. How do I reset and then prevent?

[Kingpin]

I receive bounceback emails that state:

This is an automatically generated Delivery Status Notification.
Delivery to the following recipients was aborted after 12.7 hour(s):
* emmybugg@icloud.com    [different email addresses]

The attachments included in the bounceback clearly identify that someone is spoofing our email account.  I have blocked our actual email address in the image.  We are not sending these.

IS THERE A WAY TO PREVENT SOMEONE FROM SENDING SPAM USING OUR EMAIL ADDRESS?  ISN'T THERE ANY SECURITY SETTING IN GODADDY TO VALIDATE?

[PL281 · Accepted solution]

@Kingpin 

So a couple of things

1) RESET YOUR EMAIL PASSWORD NOW!!!!! - If your relays were used up it means that somehow your password was compromised and that the spammer used your account

2) You can set up an SPF record on your domain which will help bounce emails if someone tries to send emails as you.

3) You will have to reach out to GoDaddy support and ask them to reset the quota - explain what happened and make sure you've updated your password

[Kingpin]

I did immediately change the password.  Will check on the SPF record (no idea how to do that).  

[PL281]

@Kingpin 

https://www.godaddy.com/help/add-an-spf-record-19218