Study shows how spammers cash in