Spammers use a variety of methods to obtain email addresses, such as scraping websites, purchasing email lists, using bots to harvest addresses from publicly available sources, or through data breaches. They may also use social engineering techniques to trick individuals into revealing their email addresses.