Unfortunately, the kind of spamfighting we can use volunteers for is no longer the primary type of spam we get -- the kind that 99% of our spam is now needs access to the admin tools that also allow access to nonpublic user data, so we can't hand out access as freely. (The tool that lets volunteers handle reported comment spam doesn't involve nonpublic data, so we can give that one out right and left! Except we don't get much comment spam anymore; everyone's moved on from that.) The majority of the spam we get now is designed to be as invisible as possible to anything but Google, so finding it is the world's worst scavenger hunt. I have the outline of a system in my head that will let us abstract away that user data and recruit volunteers to handle the like 70% of it that's very obviously spam and leave us more time to find the 30% that requires more digging, but we haven't had the time to build it because we've been handling the spam. With luck this will give us some spare cycles to get that built!