[WARNING]
DO NOT ENTER YOUR STEEMIT USERNAME AND PASSWORD TO ANYWHERE EXCEPT STEEMIT.COM

I am sorry to use caps.
but people need to understand this.

You said that you gave the spammer ticket to send spams using your account, and in one of your comment on that spam said that you already checked (I assume you did click that link and enter your steemit username and password to that site)
this not only allows the spammer use your account to spread spam comment but also taking over your account completely (including transfer) basically they can do EVERYTHING you can do to your account.

I suggest that you change your master password and all the password IMMEDIATELY.

By entering your username and password to that site, you are giving them your username and password. that site RECORD your username/password.

Again sorry to use caps. but i have to.

This trick is very old..