Just as a matter of interest who were the domains regged with... a colleague has just started getting this issue. The domains were regged with lowcostnames.
But, as above. just set up a blackhole for all non recognised emails. Also a new thing is to add an SPF record to the DNS. That way only domains originating from a particular server can use the @domainname.tld
S