A technique to help determine who is on selling your email address is to ass +something to the address you use to sign up for things.
e.g. If your email address is
[email protected] use
[email protected] when signing up for a myGov account.
this will not prevent you receiving phishing emails but...