Skip to content

Comment on Euro cops take down cybercrime network with 49M fake accountsparent

Comments

Yes. BTW I still do that, but with a single address, username+myonlinebank@domain.com style. It was easier when I need to give them my email again on the phone or in other circumstances, they can see it's just the same with extra bits.

My issue is if username+ecommercewebsite@domain.com leaks my account login: username@domain.com as the + is a known feature. If they are able to access username@domain.com, then they would be able to access password recovery for my bank.

With a separate finance account, even if they figured out how to access my primary personal email. There is still an air gap with my financial accounts.

I tried this route at first. There are enough stupid forms that reject VERP addresses that it's easier to just use different recipients.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.