Can you restict sending of private messages only to trusted groups. You can make a group promotion based on message count and other criterias and then allow members to send messages in private if they belong to that group. Is there any reason btw, why you are using an older version of xenforo? For security reasons one must always use the latest version.