^^^ Very faint chance of that ever happening here (unless some hack that also could happen to your bank, hospital or NASA :O)
To clear things up:
- Only logged-in members can contact anyone on the forum (PM, alt. email if allowed).
- "Allow users (= logged-in members) to email me" must be explicitely allowed. Off in stock settings \ during registration.
- For non logged-in members \ guests \ scammers \ whatever, clicking on a member name to gain access to profile info = 'nope' (see attachment).
Generally keep email hidden, unless for some very special reason really wanting to show one's email to all other members. Use PM for any contact.
= even if some undesirable creature should manage to register > no email shown, + can't send PM as PM activation follows a period of legit activity\posts (monitored by moderators).