A solution for this;

Is to make an email specifically for your crypto needs and different from your personal transactions and compliance related to job/work or any other personal stuff.

And don't be too excited registering on free stuff online that requires your email to do it. They're funneling the emails of those interested people and scrapes the data into one database for their own usage.

That's why even out of nowhere we receive from emails we don't recognize and that's because we've been sold.