My household rule for emails: IF YOU DON'T RECOGNIZE OR KNOW THE SENDER, DELETE IT...DON'T OPEN IT !
At work, they have a service they subscribe to called "spam manager". It works very well, and all the detected "spam" gets sent there. You go to their website, login and you have the option of "releasing it" or deleting it, and it keeps you in box clear.