The PM feature is where forums are most vulnerable to mass-spam attempts.

I am very open about the PM feature with regards to users and they know the rules: the PM feature allows them to share information without posting it publicly, but they know that the Admin has the right to check PMs when there is even a hint of spamming activity going on.