There are several features available to do this. In terms of controlling the volume (regardless of SPAM or not SPAM) mail flow policies can be used to limit number of SMTP connections, emails, recipients sent out.
You can always enable antispam, AV, AMP, VOF engines on your outgoing policy and set these detections in place to avoid such scenarios.