The Fortigate SPAM control functionality is built into the Security Profile section of the device as “Email Filter”.
Monitor > Log > Search > Session ID
Check from email > copy domain and searh on online tool such as Google DIG
Verify SPF & MX records
Check sender domain on online tool such as https://www.virustotal.com