In the meantime, I've decided to hack phpBB to require users to have at least 5 posts before they can access the PM interface. It's not ideal because new users won't be able to send or read PMs, but at least the spammers should be caught by it.

Peace,

Drew