The blockchain is public.   If you've ever made a transaction, people can see your address and send coins to it.  I've had a few emails from BTC Guild users thinking that it was an error in their payout (they received 0.00000001 instead of the amount), and it was just a secondary spam transaction that somebody sent to a lot of people.