Fool spammers with multiple e-mail addresses

By Munir Kotadia
17 December 2003 11:50 AM
Tags: spam, eu, munir, kotadia, europe, spammers, mail, address
COMMENTARY--Don't expect legislation to reduce the amount of spam you receive. The law can't stop spam from entering Britain and spammers have already taken over more than half the general population's personal computers for their own uses. So for now, the only way to deal with spam is to manage the problem yourself, which is surprisingly simple and does not mean going out and buying some special software.

The European Union has finally introduced its anti-spam laws, which mean that if a company sends commercial emails to consumers that haven't opted in to a specific mailing list, they face a Ã,£5,000 fine. However, this does not restrict companies from sending spam to current customers and does not protect businesses at all.

Additionally, the law has no control over spammers from outside the EU, even though the majority of our spam originates in the U.S. Incidentally, the U.S. is considering introducing its own spam laws, but in reverse -- where users will have the right to opt out from being included in a mailing list. I'm even not going to bother trying to explain why an opt-out law would be daft, unworkable and lead to far more spam; the stupidity of the proposal just leaves me speechless.

With governments seemingly unable to deliver a sensible solution, users have to take control and manage their own spam. Unsurprisingly, there is no end of anti-spam software, but as with antivirus software, it needs constant updating as spammers find new methods to bypass ever more complex filtering algorithms.

One of the most annoying things properties of spam is an inability to trace the sender. If only it was possible to figure out exactly which Web site or service was responsible for selling on e-mail addresses to the spammers, it would not only be possible to name and shame those companies into adopting an acceptable privacy policy, it might also be possible to prosecute.

Unfortunately, this is virtually impossible because most people generally have one or two e-mail addresses that they use whenever subscribing to newsletters, entering competitions or subscribing to a Web site. These three actions are almost guaranteed to get your email address on somebody's spam list. If you go one step further and post your e-mail address on a newsgroup, then there is little that will stop the avalanche of emails offering everything from Viagra to cut-price cigarettes.

It has also been suggested that when a user unsubscribes from a newsgroup or stops being a customer of a particular company, depending on privacy policy, the owner of the service has a right to sell that user's e-mail address to a third party or send spam on behalf of "partners". This means the ex-subscriber's e-mail account will be inundated with spam and they can do nothing about it.

But there is a solution.

I have found a way round the problem; it means being able to post your email address anywhere -- including on a Web site -- sign up to anything and always know exactly where spam is coming from and have the power to cut it out with a click of a mouse. The answer is to have hundreds of different e-mail addresses, one for each of the services subscribed to.

At first, that solution may sound daft and complicated, but in practice, it helps keep track of spammers and organise incoming e-mails, and actually costs less than buying a spam-blocking software. It will, however, cost a few pounds a year.

The idea is to register a domain -- for example, lets use "fendoffspam.com" (which at the time of writing was still available) and opt for a catch-all mailbox, which means the registering company will forward all e-mails sent to fendoffspam.com, regardless of what is written before the "@" sign, to an e-mail address of your choice. It is important to forward all e-mails from your domain to an e-mail address that does not already receive any spam and is not known by anyone except yourself.

Once this is done, users assign different e-mail addresses for every newsgroup, Web site registration and competition they enter. For example, when opening an account with Amazon.com, enter amazon@fendoffspam.com when asked for an e-mail address. From that day on, whenever Amazon sends you an e-mail, it will arrive in your inbox as usual, but if you ever receive spam sent to that e-mail address, your can be sure that one of two things has happened. Either, you used the amazon@fendoffspam.com e-mail address elsewhere, or Amazon sold your e-mail address to spammers, in which case you have someone to complain to.

This also makes organising your inbox easier because it is far more reliable diverting messages sent to specific email addresses than it is using keywords. So once you start getting regular spam to a particular e-mail address, simply set your e-mail client to automatically delete all e-mails sent to the offending address. Very soon, the user will have hundreds of different e-mail addresses, but all of them will be easy to remember because they are named after the site or service you have visited and registered with.

It is important to ensure that the e-mail address being used to collect messages from the domain is kept a complete secret. This should never be given out or published anywhere because that defeats the whole idea.

Companies that already own a domain will be able to use the same trick without incurring any additional costs. It might even make sense to set up a separate domain simply for the purpose of managing spam.

Although this is by no means a perfect solution, I have been using it for a number of years and find it invaluable. When my inbox is suddenly hit by a tidal wave of spam, I can easily find the rogue address and ignore any further e-mails sent to it. So instead of waiting for governments to fix the spam problem with toothless legislation or spending money on anti-spam products, think in another dimension and stop using just one e-mail address.

Advertisement

Talkback 2 comments

    Yep, I've been using the same ...Anonymous -- 17/12/03

    Yep, I've been using the same technique for years too. Works a treat.

    I was also able to help out a couple of unrelated companies whose 3rd party listserver service was compromised. I was receiving the same spam to a number of my mailing list email addresses. As I knew that these were upstanding companies, I knew there was a problem, and got these companies in touch with each other so that they were able to determine at what point their systems were compromised, and act together against the offending party.

    Pretty good approach, but limi ...Anonymous -- 04/06/04

    Pretty good approach, but limited for business purposes. Most of my spam comes from accounts where my email address was in a press release or on a web site. The web site addresses can be obfuscated (e.g. with tools like that found at www.hiveware.com), but once an address on a business card gets on a spam list, you're stuck with trying to stop the spam at the server or client level, or risk having clients not reach you because you changed your address. One of the places I receive the least amount of spam is through my formerly free account at email.com --- they seem to filter out a lot of the junk for me, as would other major email providers like yahoo or msn.

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Sick of broken tender sites
    Some of the state governments desperately need to invest in more user-friendly tender sites so that looking for information on government tenders doesn't have to be a game of blind man's bluff.
  • Array Cyberwar: What is it good for?
    In this week's episode, Cyberwar. What is Australia's place in the world of digital warfare? What are the implications for the NBN?
  • Array Is wholesale-only backhaul just a pipedream?
    The potential acquisition of Pipe Networks by SP Telemedia has raised the question about whether vertically integrated backhaul providers will mean higher wholesale prices for ISP customers.
  • More blogs »

Tags

Back to top

Featured