What's likely happening is that someone is sending out spam but using your domain name. Unfortunately there's nothing you can do about this. It's the same thing as someone sending a letter and using your address as the return address.
