When you are sure the SPF record is doing what you want, you should probably change the "~all" to be "-all". That increases the confidence level that you are sending legit email. It makes mail that wasn't sent from your domain "fails" instead of just "softfails".
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
When you are sure the SPF record is doing what you want, you should probably change the "~all" to be "-all". That increases the confidence level that you are sending legit email. It makes mail that wasn't sent from your domain "fails" instead of just "softfails".