topic Re: Someone else using my e mail address in Email

Someone else using my e mail address

Phil2017 — Fri, 27 Aug 2021 11:39:36 GMT

A spammer is using my email address for their multifarious reasons. Their address is lindbladx@striker.ottawa.on.ca Anyone know how to stop this?

Incidentally I noticed that one other person has posted a similar comment yesterday. Maybe the bad guys concentrating on Plusnet this week?

Re: Someone else using my e mail address

Champnet — Sat, 28 Aug 2021 20:33:15 GMT

Sending emails we could all pretend to be someone we're not. It's down to the receiving email system to sort out the genuine from the false addresses. Inconvenient as it can be you cannot stop it.

Re: Someone else using my e mail address

chesterfield — Sun, 29 Aug 2021 13:31:45 GMT

Im suffering the same, but the headers appear to show mail originating from my account at plusnet. Passwords changed as a security measure.

Re: Someone else using my e mail address

Champnet — Sun, 29 Aug 2021 21:49:53 GMT

@chesterfield Where did you get the header record from ? Was it an undeliverable message or did someone reply to the original email as this would contain your email address as a “return to” detail.

Re: Someone else using my e mail address

chesterfield — Mon, 30 Aug 2021 11:57:24 GMT

@Champnet It was an email sent to me, appearing to be from my own plusnet account.

Header: (XXXXXXX.plus.com is my plusnet ID, chris000 is not an address I use)

Return-path: <chris000@XXXXXXX.plus.com>
Envelope-to: chris000@XXXXXXX.plus.com
Delivery-date: Sun, 29 Aug 2021 11:29:32 +0100
Received: from [84.93.230.237] (helo=avasin10.plus.net)
      by inmx20.plus.net with esmtp (PlusNet MXCore v2.00) id 1mKI4C-0004DH-3v
      for chris000@XXXXXXX.plus.com; Sun, 29 Aug 2021 11:29:32 +0100
Received: from [102.89.0.204] ([102.89.1.193])
   by Plusnet Cloudmark Gateway with ESMTP
   id KI43muuohVNKaKI45m86gs; Sun, 29 Aug 2021 11:29:26 +0100
X-BV-Spam-Flag: Yes
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=GNaT7tFK c=1 sm=1 tr=0 cx=a_idp_d
p=nB4ZqsF0izRGTkGuQBEA:9 p=GjopYUQxc-cA:10 p=JYkVw_zZ4YYA:10
a=ROLLm6z+GCTC6GNm1UIUug==:117 a=ROLLm6z+GCTC6GNm1UIUug==:17
a=E5nwcu9QDW8A:10 a=udTvpura_4gA:10 a=Z5ABNNGmrOfJ6cZ5bIyy:22
a=bWyr8ysk75zN3GCy5bjg:22
Message-ID: <612B6F92.5020205@XXXXXXX.plus.com>
Date: Sun, 29 Aug 2021 11:29:22 +0000
From: <chris000@XXXXXXX.plus.com>
User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:15.0) Gecko/20120907 Thunderbird/15.0.1
MIME-Version: 1.0
To: <chris000@XXXXXXX.plus.com>
Content-Type: text/plain; charset=WINDOWS-1250; format=flowed
Content-Transfer-Encoding: 8bit
X-CMAE-Envelope: MS4wfLOHqD3TqhJxZQhF8NDbp/vQRPZ4mn3sIi7aeG8RZYQbwf1XrgOhW/fibBCBl0ZJwuV4EoBTBvB7KZ5n4Syc5E+UmuLLORb2C4TE6mGhm40KGcTv4QNi
zdxb91g4zIG8J/J250FcBuzWkc74dBOISfSycpdGP8OFg4jCfODSeXHsQneq8K/y60jHVH+Zf+lPFQxNdk22osz7T8P95CsQAQU=
X-pn-pstn-db:" Spam 99
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: Waiting for the payment.
X-EsetId: 37303A299ABC1750637167

Re: Someone else using my e mail address

Champnet — Mon, 30 Aug 2021 12:23:29 GMT

Received: from [102.89.0.204] Is a Mail server somewhere in Nigeria, no surprise there….
Using the same email address for send to & reply to is a common trick used by spammers trying to avoid detection. As you’ve changed your password there’s not a lot more you can do..
For info only check here to see if, or how, your email address has been harvested https://haveibeenpwned.com/

Re: Someone else using my e mail address

Phil2017 — Mon, 30 Aug 2021 17:01:37 GMT

Thats where I started at the beginning of this chain. An an email from "me" to me. Thanks to all