I think someone has been using my freinds email addy and sending spam?

how can i prove this? is it a crime to get into someones emails? my freind has been put on some adult sites and think its someone using her addy? wht can she do?