Stick with Gmail, Just lock your account down properly.
Enable the Verification codes, and add your phone to the system.
That way you get 8 verification codes at the beginning, and once you run out you can either ask for another 8, or get them sent to your phone as you need them. Each code lasts 30 days.
So basically, You log in using your email and password, and then enter a unique verification code that only you know and its unique to the system you log in on. Also the code you enter, becomes void once you use it. So the spammers cant use voided codes.
So if someone in china tries to log in, they'll be asked for username and password, followed by a unique code. Which they wont know.
I had problems with people sending mail from my Gmail account, out to my contact list. So enabled the extra security, and I've not had a problem since.