We get daily "spam reports" from our co-located server provider where I literally open the "spam" mail and click unsubscribe for the user.