Set a whitelist of emails or domains that are legitimate recipients of notifications.  All others will be suppressed.