If you check the AUR page of the Spotify package, you will see that you must do :
curl -sS https://download.spotify.com/debian/pubkey_0D811D58.gpg | gpg --import -
Tip : before googling, just look at the AUR pages on nthe Arch site. this is the one for Spotify :
https://aur.archlinux.org/packages/spotify