First Direct - data leak?

satsu

Hi All,


In the last few days I've started receiving phishing spam on an email address used only for First Direct. I have never sent any mails with this address, only used it to sign up with the bank and I am opted out of any marketing / 3rd party info.


As far as I can see the possibilities are:

1. The security of my email account has been compromised, but why would spammers choose just one very rarely used address?
2. The spammers have randomly happened upon this particular address, which again seems quite unlikely
3. First Direct, or a 3rd party acting on their behalf, have somehow lost my email address

I've messaged First Direct and am waiting for their response, but wanted to see if anybody else has started receiving spam on a First Direct-only address.


Thanks

PeacefulWaters

Number 2 is more likely than you think.

username

On my FD email address on my domain email, it's not a very common domain either! The spammer also had sh!te music choice too, pfft, as if to think I'd fall for buying that...

Paul_1977

Where is your domain hosted, perhaps they have had a data leak.

alanq

Today a phishing email arrived at an address I have given to no one other than First Direct. It was titled "Unrecognized charge on account !" and was allegedly from apple.com.

My mail service provider is Plusnet.

TheTracker

Number 2 is my bet.

[Deleted User]

Lists of domains are publicly accessible, so even you@g28hbdbwja768hgy.net is fair game.

Even then, spammers will stick multiple things in front of the @ to see what doesn't get returned.

I'm going with #2.

awolo1

or your PC had spyware/virus/malware and detected this email address and it's been included in a database of other email addresses obtained through similar methods

This is not on your list and does happen

#3

Vortigern

username wrote: »

The spammer also had sh!te music choice too, pfft, as if to think I'd fall for buying that...

Are you referring to the Topsify/Spotify emails?

bubieyehyeh

alanq wrote: »

Today a phishing email arrived at an address I have given to no one other than First Direct. It was titled "UnrecoIgnized charge on account !" and was allegedly from apple.com.

I've just received the same, again on a email address only ever given to first direct.

I've had no other spam on any of my numerous other email addresses, or any evidence of people guessing email addresses at my domain catchall address.

alternate

Thread is over two years old, you might have been better starting a new one.