Website hacked

Hi from Waimea Toastmasters, club 4413485. Our site seems to be hacked. I keep getting emails from someone that makes it look it came from our website. I keep marking the emails as spam, but they keep coming in anyway. See attached screenshots. Thank you - Carole W.
 

Your site hasn't been hacked.  Anyone can send email to your address.  There were two with the same title from different addresses in one day, both sent to your custom domain admin address.  I don't see any others in the last month.  Marking them as spam is the best solution, although that only blocks that address.  You can try lowering your spam assassin threshold 

While investigating I noticed that your treasurer is missing emails from service@paypal.com - you might want to whitelist that address. Also feedback@bankofhawaiifeedback.com is blocked. Documentation can be found here: support.toastmastersclubs.org/doc/item/reducing-spam

The reason I was thinking that the website was hacked is that the "from" address on the email is:"Toastmasters Club 4413485 on behalf of Tracy"
And the subject has [WTM] at the beginning.
I thought only people who were listed as club members could send emails that looked like that. How else could someone send an email that looked like that?
thanks for the tips.
Carole
 

The antispoofing phrase just means that the email has come through the FTH system - anyone can send an email to any of the officer addresses including admin, and will be processed through the system if they aren't picked up as spam