# Did Google sell me out?

**URL:** <https://boards.straightdope.com/t/did-google-sell-me-out/693556>\
**Category:** Factual Questions\
**Created:** [July 19, 2014, 9:19pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556 "2014-07-19T21:19:19Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![K364](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/k364/32/5_2.png) [@K364](https://boards.straightdope.com/u/K364)\
**Post date:** [July 19, 2014, 9:19pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/1 "2014-07-19T21:19:19Z")

</div>

I use Gmail and don’t get a lot of spam. In fact, I have the spam filter turned off - everything goes to my inbox. In the last few years spam would come intermittently, but even at its worst, never more than a few a week. At its best, it could be several weeks without spam.

That’s all changed… here is what happened:

- June 2 I sent some emails to my accountant re taxes.
- June 4 I started getting spam. Several per day, all about loans, credit scores, avoid taxes - be your own boss, etc
- A week later, and right up to now, I get general spam: viagra, cheap rolexes, etc

So of course I’m very suspicious. I know that Google will target you with ads in the app based upon email conversations, but did they sell my id to the spammers? Or was there a leak somewhere else (e.g. my accountants ISP).

What do you think?

---

<div class="post-metadata">

**Author:** ![ZipperJJ](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/zipperjj/32/211_2.png) [@ZipperJJ](https://boards.straightdope.com/u/ZipperJJ)\
**Post date:** [July 19, 2014, 10:22pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/2 "2014-07-19T22:22:56Z")

</div>

Is your email address guessable? Or is it random like your username here?

Also, do you use your gmail address anywhere as a login? Like a message board.

---

<div class="post-metadata">

**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\
**Post date:** [July 19, 2014, 11:14pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/3 "2014-07-19T23:14:49Z")

</div>

I doubt a major email provider would do that, it makes their own service less attractive.

---

<div class="post-metadata">

**Author:** ![Telemark](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/telemark/32/372_2.png) [@Telemark](https://boards.straightdope.com/u/Telemark)\
**Post date:** [July 20, 2014, 12:09am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/4 "2014-07-20T00:09:52Z")

</div>

> [@K364](#):
>
> What do you think?

I think your email address got on a spam list that was sold to a lot of people. I think Google had nothing to do with it.

---

<div class="post-metadata">

**Author:** ![Cazzle](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cazzle/32/75_2.png) [@Cazzle](https://boards.straightdope.com/u/Cazzle)\
**Post date:** [July 20, 2014, 12:48am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/5 "2014-07-20T00:48:10Z")

</div>

When I give out my Gmail address now, I customise it: [Username+sitename@gmail.com](mailto:Username+sitename@gmail.com)  
Gmail ignores the + symbol and everything after it.  
Not only can I tell who has sold my address, but I can set up a filter to trash any mail that comes to that address.  
Won’t fix your current problem, but may help in future.

---

<div class="post-metadata">

**Author:** ![Digital\_is\_the\_new\_Analog](https://avatars.discourse-cdn.com/v4/letter/d/a88e4f/32.png) [@Digital\_is\_the\_new\_Analog](https://boards.straightdope.com/u/Digital_is_the_new_Analog)\
**Post date:** [July 20, 2014, 2:04am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/6 "2014-07-20T02:04:10Z")

</div>

> [@Eliahna](#):
>
> When I give out my Gmail address now, I customise it: [Username+sitename@gmail.com](mailto:Username+sitename@gmail.com)  
> Gmail ignores the + symbol and everything after it.  
> Not only can I tell who has sold my address, but I can set up a filter to trash any mail that comes to that address.  
> Won’t fix your current problem, but may help in future.

This also seems to work for my AT&T mail, serviced by Yahoo.  
I hadn’t realized that. Thanks.

---

<div class="post-metadata">

**Author:** ![K364](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/k364/32/5_2.png) [@K364](https://boards.straightdope.com/u/K364)\
**Post date:** [July 20, 2014, 2:07am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/7 "2014-07-20T02:07:53Z")

</div>

Thanks everyone for the replies

---

<div class="post-metadata">

**Author:** ![Kobal2](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kobal2/32/20_2.png) [@Kobal2](https://boards.straightdope.com/u/Kobal2)\
**Post date:** [July 20, 2014, 2:25am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/8 "2014-07-20T02:25:08Z")

</div>

> [@Eliahna](#):
>
> When I give out my Gmail address now, I customise it: [EMAIL=“[Username+sitename@gmail.com](mailto:Username+sitename@gmail.com)”]Username+sitename@gmail.com  
> Gmail ignores the + symbol and everything after it.  
> Not only can I tell who has sold my address, but I can set up a filter to trash any mail that comes to that address.  
> Won’t fix your current problem, but may help in future.

This is seven shades of brilliant. Thanks for that !

---

<div class="post-metadata">

**Author:** ![jtur88](https://avatars.discourse-cdn.com/v4/letter/j/e9c0ed/32.png) [@jtur88](https://boards.straightdope.com/u/jtur88)\
**Post date:** [July 20, 2014, 2:46am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/9 "2014-07-20T02:46:36Z")

</div>

Here are the spam counts I get from my e-mail providers:  
[G-mail.com](http://G-mail.com) – 4 per day  
[Yahoo.com](http://Yahoo.com) – 90 per day  
[Hotmail.com](http://Hotmail.com) – 3 per day  
[mail.ru](http://mail.ru) – zero in a year  
yahoo.no – zero in \>10 years

> [@Eliahna](#):
>
> When I give out my Gmail address now, I customise it: [Username+sitename@gmail.com](mailto:Username+sitename@gmail.com)  
> Gmail ignores the + symbol and everything after it.  
> Not only can I tell who has sold my address, but I can set up a filter to trash any mail that comes to that address.  
> Won’t fix your current problem, but may help in future.

What do you mean by “sitename”? You mean the name of the site you are sending it to?

---

<div class="post-metadata">

**Author:** ![Cazzle](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cazzle/32/75_2.png) [@Cazzle](https://boards.straightdope.com/u/Cazzle)\
**Post date:** [July 20, 2014, 10:31am UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/10 "2014-07-20T10:31:26Z")

</div>

> [@jtur88](#):
>
> Here are the spam counts I get from my e-mail providers:  
> [G-mail.com](http://G-mail.com) – 4 per day  
> [Yahoo.com](http://Yahoo.com) – 90 per day  
> [Hotmail.com](http://Hotmail.com) – 3 per day  
> [mail.ru](http://mail.ru) – zero in a year  
> yahoo.no – zero in \>10 years
> 
> What do you mean by “sitename”? You mean the name of the site you are sending it to?

Say I give my email address to the straight dope, I give them [myusername+straightdope@gmail.com](mailto:myusername+straightdope@gmail.com), or something like that.  
I try to stick to the exact characters in their URL because I often need to use my email address to log back in to sites. It’s no good trying to log back in as [username+sdmb@gmail.com](mailto:username+sdmb@gmail.com) if that’s not what I used when I signed up.

---

<div class="post-metadata">

**Author:** ![Keeve](https://avatars.discourse-cdn.com/v4/letter/k/f07891/32.png) [@Keeve](https://boards.straightdope.com/u/Keeve)\
**Post date:** [July 20, 2014, 12:23pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/11 "2014-07-20T12:23:02Z")

</div>

> [@Eliahna](#):
>
> When I give out my Gmail address now, I customise it: [Username+sitename@gmail.com](mailto:Username+sitename@gmail.com)  
> Gmail ignores the + symbol and everything after it.  
> Not only can I tell who has sold my address, but I can set up a filter to trash any mail that comes to that address.

I’m fascinated by this, and I want to learn more about it.

What happens when SDMB sends you something? It sounds like it goes to [myusername@gmail.com](mailto:myusername@gmail.com). How does it appear in your inbox, in other words, what do you see that shows you who has sold your address, or to set up filters?

---

<div class="post-metadata">

**Author:** ![Cazzle](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cazzle/32/75_2.png) [@Cazzle](https://boards.straightdope.com/u/Cazzle)\
**Post date:** [July 20, 2014, 1:05pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/12 "2014-07-20T13:05:21Z")

</div>

> [@Keeve](#):
>
> I’m fascinated by this, and I want to learn more about it.
> 
> What happens when SDMB sends you something? It sounds like it goes to [myusername@gmail.com](mailto:myusername@gmail.com). How does it appear in your inbox, in other words, what do you see that shows you who has sold your address, or to set up filters?

Gmail delivers the mail to the username portion before the +, but it still has the full To address in the headers. To filter, you just set up a filter for the To address [username+sdmb@gmail.com](mailto:username+sdmb@gmail.com). You could use the same trick to filter all mail from a company that uses different From addresses because they’d all be using the same unique To address - ie, if mail coming from the Straight Dope sometimes came from [admin@straightdope.com](mailto:admin@straightdope.com), sometimes from [editor@chicagoreader.com](mailto:editor@chicagoreader.com), sometimes from [Cecil@perfectmaster.com](mailto:Cecil@perfectmaster.com), sometimes [jackbootmod69@hotmail.com](mailto:jackbootmod69@hotmail.com) you could still filter them all automatically into a Straight Dope label by using the unique To address as the filter criteria.

---

<div class="post-metadata">

**Author:** ![Frylock](https://avatars.discourse-cdn.com/v4/letter/f/ce7236/32.png) [@Frylock](https://boards.straightdope.com/u/Frylock)\
**Post date:** [July 20, 2014, 1:09pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/13 "2014-07-20T13:09:32Z")

</div>

I don’t understand how it’s effective. Can’t spammers just remove the ‘+’ and everything following?

---

<div class="post-metadata">

**Author:** ![Cazzle](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cazzle/32/75_2.png) [@Cazzle](https://boards.straightdope.com/u/Cazzle)\
**Post date:** [July 20, 2014, 1:26pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/14 "2014-07-20T13:26:18Z")

</div>

> [@Frylock](#):
>
> I don’t understand how it’s effective. Can’t spammers just remove the ‘+’ and everything following?

Sure they can. It’s not foolproof. But if they don’t, you can trace where your address was compromised, and you can filter all further messages to that address. It’s not the solution to all the ills of the world, but it is a small, simple step to take.

I don’t habitually give my address to sites I don’t trust. That’s the main way I protect my address.

---

<div class="post-metadata">

**Author:** ![Keeve](https://avatars.discourse-cdn.com/v4/letter/k/f07891/32.png) [@Keeve](https://boards.straightdope.com/u/Keeve)\
**Post date:** [July 20, 2014, 1:35pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/15 "2014-07-20T13:35:26Z")

</div>

My main email is a Juno account. Doesn’t work. Oh well.

I don’t get too much spam anyway, because I don’t give out my email randomly. But it would have been nice to see the origin of the spam that I do get.

---

<div class="post-metadata">

**Author:** ![cookiecuttercc](https://avatars.discourse-cdn.com/v4/letter/c/f4b2a3/32.png) [@cookiecuttercc](https://boards.straightdope.com/u/cookiecuttercc)\
**Post date:** [July 20, 2014, 2:27pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/16 "2014-07-20T14:27:33Z")

</div>

perhaps your accountant’s contact list has been hijacked or your accountant is selling your personal info (which is extremely unlikely).

don’t know the specifics on how it’s done, but i believe that viruses/malware are capable of skimming the info from contact lists.

---

<div class="post-metadata">

**Author:** ![Mr.Slant](https://avatars.discourse-cdn.com/v4/letter/m/c57346/32.png) [@Mr.Slant](https://boards.straightdope.com/u/Mr.Slant)\
**Post date:** [July 20, 2014, 2:56pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/17 "2014-07-20T14:56:59Z")

</div>

> [@K364](#):
>
> I use Gmail and don’t get a lot of spam. In fact, I have the spam filter turned off - everything goes to my inbox. In the last few years spam would come intermittently, but even at its worst, never more than a few a week. At its best, it could be several weeks without spam.
> 
> That’s all changed… here is what happened:
> 
> - June 2 I sent some emails to my accountant re taxes.

Guess: Your accountant got hacked, and the email addy’s of everyone he corresponds with are now out there.

---

<div class="post-metadata">

**Author:** ![DingoelGringo](https://avatars.discourse-cdn.com/v4/letter/d/9d8465/32.png) [@DingoelGringo](https://boards.straightdope.com/u/DingoelGringo)\
**Post date:** [July 20, 2014, 2:59pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/18 "2014-07-20T14:59:05Z")

</div>

> [@K364](#):
>
> I use Gmail and don’t get a lot of spam. In fact, I have the spam filter turned off - everything goes to my inbox. In the last few years spam would come intermittently, but even at its worst, never more than a few a week. At its best, it could be several weeks without spam.
> 
> That’s all changed… here is what happened:
> 
> - June 2 I sent some emails to my accountant re taxes.
> - June 4 I started getting spam. Several per day, all about loans, credit scores, avoid taxes - be your own boss, etc
> - A week later, and right up to now, I get general spam: viagra, cheap rolexes, etc
> 
> So of course I’m very suspicious. I know that Google will target you with ads in the app based upon email conversations, but did they sell my id to the spammers? Or was there a leak somewhere else (e.g. my accountants ISP).
> 
> What do you think?

Your accountant sold you out. Is what I’d guess.

---

<div class="post-metadata">

**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\
**Post date:** [July 23, 2014, 8:05pm UTC](https://boards.straightdope.com/t/did-google-sell-me-out/693556/19 "2014-07-23T20:05:09Z")

</div>

> [@Frylock](#):
>
> I don’t understand how it’s effective. Can’t spammers just remove the ‘+’ and everything following?

Most spam is automatic. So it would take someone noticing people doing this, figuring out what sites it worked on, and programming the spambot to drop what came after the plus sign. There probably aren’t enough people doing this to make it worthwhile. Especially since you’re weeding out the people who apparently really dislike spam .

But, really, I’m not sure there’s much interest in the spammer hiding where they got your email. Sure, you can filter it out, but you’re that knowledgeable, you’re already having your spam filtered anyways. The people who have an interest in removing it are whoever shares it, and they have to share a lot of them to make any money off it. And since they don’t generally specialize in this sort of thing, they are even less likely to set up these filters.
