If I understand correctly, AirBnB directly posted to Craigslist, where most of the spam emails (such as the roommate or oDesk emails) look to be the work of third-party affiliates. I'm not condoning AirBnB's methods, but there is a subtlety here that makes affiliate spam even harder to battle.
Lots of companies use affiliates to do the dirty work for them, then ban affiliates that get caught. New affiliates pop up, or the banned affiliates create new accounts and start over. That leaves sites like Craigslist in the unenviable position of playing whack-a-mole to try and ban spammers.
Other variations on these include fake profiles of women on (insert social networking site her) who inexplicably "friend" men and entice them to sign up for dating/adult sites where the target can see more photos, and gambling instruction guides/beat the casino secrets uploaded to torrent sites for free. Naturally affiliate links to lots of online gambling sites are embedded in the guides.
I guess the takeaways are:
1. Never trust user generated content.
2. Whenever there's a way for people to produce content (effectively) for free, the affiliates/scammers will be there. I built a rental-listing site a few years back. Not long after I stared getting real listings, I started getting rental scams. I had almost zero traffic, but the tiny blip on the radar screen my site produced drew scammers like flies.
4. It's often better to ask forgiveness than permission. What repercussions did AirBnB suffer for their posts? What real repercussions do any of the spammers face?
5. Just writing about affiliate marketing, well, at least this side of it, makes me feel icky.