Our not for profit organisation has received almost 100 in the last few days.  We have asked them to stop.

Note that if they are emailing direct to your name, (e.g. joebloggs@mycompany.com) as they are doing with our staff, then they are in breach of GDPR regulations. If they don't stop as soon as possible then they will be reported to the Information Commissioners Office.

The maximum fine for a GDPR breach is 4% of annual global turnover or 10 million Euros, whichever is higher.