I have a friend who got spam on ps4. It used his original psn id(he did a name change.) a discount code. He thought SW was cloning and selling his account, now I'm kinda nervous since I use it often myself..

That seems unlikely. More likely that someone sold his ID at some point, especially if he has ever joined up with randoms for a MP session. I started receiving that sort of spam long before I started using Save Wizard.

EDIT: He could probably block that sort of thing by changing his privacy settings to only accept messages from people already on his friends list. It's never bothered me enough for me to check on this.