# Do other people get bombarded with emails for people with similar names?

**URL:** <https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [February 25, 2017, 5:27pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753 "2017-02-25T17:27:40Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [February 26, 2017, 9:24pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/41 "2017-02-26T21:24:40Z")

</div>

> [@Guinastasia](#):
>
> Uh, I think things have changed a wee bit have changed in the last forty years or so. :dubious:

Yeah, the problem with real name email addresses has gotten much, much worse. The easier you make it for someone to guess your email, the easier it is to get into your account. Obligatory [XKCD](https://xkcd.com/1200/).

(Over and over I amazed at how little concern Dopers have regarding basic computer security.)

---

<div class="post-metadata">

**Author:** ![kayT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kayt/32/3633_2.png) [@kayT](https://boards.straightdope.com/u/kayT)\
**Post date:** [February 26, 2017, 9:39pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/42 "2017-02-26T21:39:32Z")

</div>

So then why don’t all of us with names as email addresses have all these terrible problems (which I guess will result from having our email hijacked somehow), **ftg**? If you want us to be more security conscious maybe you could give us information instead of insulting us.

---

<div class="post-metadata">

**Author:** ![hajario](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hajario/32/171_2.png) [@hajario](https://boards.straightdope.com/u/hajario)\
**Post date:** [February 26, 2017, 10:37pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/43 "2017-02-26T22:37:18Z")

</div>

> [@ftg](#):
>
> Yeah, the problem with real name email addresses has gotten much, much worse. The easier you make it for someone to guess your email, the easier it is to get into your account. Obligatory [XKCD](https://xkcd.com/1200/).
> 
> (Over and over I amazed at how little concern Dopers have regarding basic computer security.)

Then why does every large and small high tech engineering company use some variant of [name@company.com](mailto:name@company.com)?

---

<div class="post-metadata">

**Author:** ![Peter\_Morris](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/peter_morris/32/359_2.png) [@Peter\_Morris](https://boards.straightdope.com/u/Peter_Morris)\
**Post date:** [February 26, 2017, 11:19pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/44 "2017-02-26T23:19:49Z")

</div>

Over at the [Comics I Don’t Understand](http://comicsidontunderstand.com/wordpress/)blog the owner’s name is Bill Bickel. He frequently tells the saga of “[idiot Bill Bickel](http://comicsidontunderstand.com/wordpress/category/bill-bickels/)” a different person with the same name who constantly gives out the wrong email address.

---

<div class="post-metadata">

**Author:** ![TheCuse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/thecuse/32/2854_2.png) [@TheCuse](https://boards.straightdope.com/u/TheCuse)\
**Post date:** [February 26, 2017, 11:49pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/45 "2017-02-26T23:49:29Z")

</div>

> [@ftg](#):
>
> Yeah, the problem with real name email addresses has gotten much, much worse. The easier you make it for someone to guess your email, the easier it is to get into your account. Obligatory [XKCD](https://xkcd.com/1200/).
> 
> (Over and over I amazed at how little concern Dopers have regarding basic computer security.)

That is nonsense. I think most Dopers (and not just them) are smart enough to not get phished. And that’s basically what you are saying.

Tell you what–I wil give you a my email address and I will guarantee that (per password experts) it will take you 300 years to figure it out.

---

<div class="post-metadata">

**Author:** ![Merneith](https://avatars.discourse-cdn.com/v4/letter/m/57b2e6/32.png) [@Merneith](https://boards.straightdope.com/u/Merneith)\
**Post date:** [February 27, 2017, 3:11am UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/46 "2017-02-27T03:11:58Z")

</div>

> [@RTFirefly](#):
>
> I haven’t been particularly perturbed about it, other than the creeping sense that I was the only one this was happening to. (I feel better about that now that I know this isn’t so!)

Same here!

I’m also getting the impression that there’s not much point in trying to change my email, since there doesn’t seem anyway to escape this problem short of setting up my email from a personal domain. Which I don’t care enough to do.

---

<div class="post-metadata">

**Author:** ![AngelSoft](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/angelsoft/32/440_2.png) [@AngelSoft](https://boards.straightdope.com/u/AngelSoft)\
**Post date:** [February 27, 2017, 5:21am UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/47 "2017-02-27T05:21:54Z")

</div>

So apparently one of the guys who uses my email address is a rich douche bag realtor from the Houston, Texas area. I got two emails today. One for a quote for repairing his gold, 2005 Jaguar XJ8L. About $2k. Then a quote for a $12k roof repair that lists his ‘work’ email which shows me he works in real estate. Fairly positive this guy is different from the pornhublive one. I still haven’t worked up the nerve to log on and actually watch a webcam on his dime lol

Edit: And I forgot to mention. The company quoting the roof repair is called “My God Moves Mountains”. What the ever loving fuck Texas.

---

<div class="post-metadata">

**Author:** ![ioioio](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ioioio/32/316_2.png) [@ioioio](https://boards.straightdope.com/u/ioioio)\
**Post date:** [February 27, 2017, 10:11am UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/48 "2017-02-27T10:11:13Z")

</div>

I haven’t gotten many misdirected emails, but some of the ones I’ve gotten have been doozies.

Somehow my email address got on the mailing list of what appeared to be a 12-year-old girl. (A glimpse into the 12-year-old mind is a frightening thing.) I nicely wrote to inform her and ask her to remove me. She responded with a hateful obscenity-laden grammatically-challenged message.  
She called me “stoopid” :(.  
I went all highly-educated technically-savvy on her, threatening to cause her to lose her email account. I’m sure I scared the crap out of the little brat.

Another time, my work email included a message from the female half of a cheating couple planning a rendezvous. I let her know she had the wrong person. Never heard another peep from her.

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [February 27, 2017, 6:42pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/49 "2017-02-27T18:42:45Z")

</div>

> [@hajario](#):
>
> Then why does every large and small high tech engineering company use some variant of [name@company.com](mailto:name@company.com)?

Because the decision was made by HR, not by people actually understanding security. HR hates weird, incomprehensible email names.

And there’s a ton of ways an email account can be compromised other than phishing. And new ways are discovered all the time.

One simple example: Yahoo! has been repeatedly breached recently and email accounts and passwords stolen. Presumably those lists are available online in certain markets. Someone looking to target Rufus T. Firefly will look for obvious account names. But if RTF’s account name was sugarisassugardoes, are they going to know that?

One of the simplest methods is to just call the email provider, say you got locked out of your account and lay on the BS. It is amazing how often a CSR will fall for this.

Security breaches, like a lot of accidents, involve a chain of events. All too often people automagically assume that they can be weak in one link since those other links will protect them. Bad idea. Always take seriously all steps in security.

Again, I find it incredibly that such basics of online security aren’t taken seriously by Dopers.

---

<div class="post-metadata">

**Author:** ![amarinth](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@amarinth](https://boards.straightdope.com/u/amarinth)\
**Post date:** [February 27, 2017, 7:39pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/50 "2017-02-27T19:39:09Z")

</div>

> [@Lamia](#):
>
> This has happened to me a number of times. My Gmail address is [first initial][middle initial][last name]@gmail.com, and at least two different people who have similar names have used it by accident over the years. In one case it was someone who’d signed up for some sort of financial service and I called the service and got it straightened out – someone had entered the wrong middle initial in their system.

I get this every so often. There are a few people out there who don’t seem to know their own email address and don’t care. And the thing is, they’re not signing up for frivolous things, but serious things. (Bank statements, credit cards, loans). It’s also a pain when you try to get it removed. I’ve called companies to change the email address (I really shouldn’t be getting their notices that the car loan is due and that person probably should know). And the company wants to know what the password is, what the person’s mother’s maiden name is, what the right email address is, etc. I, of course, know none of these things because it isn’t my account, it’s not my mother, and I have no idea where the email is supposed to go - just that it isn’t supposed to go to me.

The weirdest set of mail I got were plans for a family reunion. Someone guessed at what their cousins’ email addresses might be and it took a while to get me out of the email chain.

---

<div class="post-metadata">

**Author:** ![amarinth](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@amarinth](https://boards.straightdope.com/u/amarinth)\
**Post date:** [February 27, 2017, 7:47pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/51 "2017-02-27T19:47:40Z")

</div>

> [@ftg](#):
>
> Yeah, the problem with real name email addresses has gotten much, much worse. The easier you make it for someone to guess your email, the easier it is to get into your account. Obligatory [XKCD](https://xkcd.com/1200/).
> 
> (Over and over I amazed at how little concern Dopers have regarding basic computer security.)

Again, can you give an example of a professionally appropriate email address that someone with concerns about computer security would use?

---

<div class="post-metadata">

**Author:** ![AngelSoft](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/angelsoft/32/440_2.png) [@AngelSoft](https://boards.straightdope.com/u/AngelSoft)\
**Post date:** [February 27, 2017, 7:57pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/52 "2017-02-27T19:57:44Z")

</div>

> [@amarinth](#):
>
> Again, can you give an example of a professionally appropriate email address that someone with concerns about computer security would use?

[I\_4m\_pr0ff3510n4l@gmail.com](mailto:I_4m_pr0ff3510n4l@gmail.com)

---

<div class="post-metadata">

**Author:** ![TheCuse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/thecuse/32/2854_2.png) [@TheCuse](https://boards.straightdope.com/u/TheCuse)\
**Post date:** [February 28, 2017, 12:00am UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/53 "2017-02-28T00:00:31Z")

</div>

> [@ftg](#):
>
> Because the decision was made by HR, not by people actually understanding security. HR hates weird, incomprehensible email names.
> 
> And there’s a ton of ways an email account can be compromised other than phishing. And new ways are discovered all the time.
> 
> One simple example: Yahoo! has been repeatedly breached recently and email accounts and passwords stolen. Presumably those lists are available online in certain markets. Someone looking to target Rufus T. Firefly will look for obvious account names. But if RTF’s account name was sugarisassugardoes, are they going to know that?
> 
> One of the simplest methods is to just call the email provider, say you got locked out of your account and lay on the BS. It is amazing how often a CSR will fall for this.
> 
> Security breaches, like a lot of accidents, involve a chain of events. All too often people automagically assume that they can be weak in one link since those other links will protect them. Bad idea. Always take seriously all steps in security.
> 
> Again, I find it incredibly that such basics of online security aren’t taken seriously by Dopers.

I think you’re painting with too broad of a brush. And plenty of email providers have security questions that must be answered. There is no way that someone is going to know my first room mate’s name, or the name of my first pet. Or the make and model of my first car. If they can figure those out, then my email password is the least of my concerns.

---

<div class="post-metadata">

**Author:** ![Apollyon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/apollyon/32/4238_2.png) [@Apollyon](https://boards.straightdope.com/u/Apollyon)\
**Post date:** [February 28, 2017, 12:40am UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/54 "2017-02-28T00:40:09Z")

</div>

In addition to the aforementioned periods Gmail ignores anything after a plus sign. So, [apollyon@gmail.com](mailto:apollyon@gmail.com) and apollyon+foo@gmail are treated as the same address. (Not my actual Gmail address, which is of the firstname.lastname type.)

I’ve used the plus suffix a couple of times when I’ve needed to register a different address but want responses coming to my usual inbox.

When I tried to sign up for eBay years back it told me my Gmail address was already in use… but sending an “I forgot my password” email never sent me a reset link. It appears that someone signed up with my address (which became their login) but then corrected their email inside eBay. I was able to sign up with a “plus” version; different address as far as eBay was concerned, but delivers mail to my usual place.

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [February 28, 2017, 5:13pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/55 "2017-02-28T17:13:33Z")

</div>

> [@TheCuse](#):
>
> I think you’re painting with too broad of a brush. And plenty of email providers have security questions that must be answered. There is no way that someone is going to know my first room mate’s name, or the name of my first pet. Or the make and model of my first car. If they can figure those out, then my email password is the least of my concerns.

Again, surprising level of naiveté. There are scads of ways to get around security questions, esp. if there’s a CSR involved.

This mentality of “It’s okay to make a poor security decision here since what are the chances of the other security links failing?” is _exactly_ how bad security arises. _Exactly_.

You take precautions every step of the way or else.

---

<div class="post-metadata">

**Author:** ![apollonia](https://avatars.discourse-cdn.com/v4/letter/a/2bfe46/32.png) [@apollonia](https://boards.straightdope.com/u/apollonia)\
**Post date:** [February 28, 2017, 5:26pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/56 "2017-02-28T17:26:08Z")

</div>

And what solutions do you have, other than just telling us we’re all shockingly naive?

---

<div class="post-metadata">

**Author:** ![doreen](https://avatars.discourse-cdn.com/v4/letter/d/858c86/32.png) [@doreen](https://boards.straightdope.com/u/doreen)\
**Post date:** [February 28, 2017, 5:48pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/57 "2017-02-28T17:48:11Z")

</div>

> [@apollonia](#):
>
> And what solutions do you have, other than just telling us we’re all shockingly naive?

And make sure that solution covers what is probably the worst security issue of all - the fact that people need so many different passwords, with so many different rules, that have to be changed so often that it is inevitable that there is going to be a post-it somewhere with all the passwords written down. You can say that’s a poor security decision- but I say that making security rules without accounting for the human factor is the poor decision.

---

<div class="post-metadata">

**Author:** ![erysichthon](https://avatars.discourse-cdn.com/v4/letter/e/d07c76/32.png) [@erysichthon](https://boards.straightdope.com/u/erysichthon)\
**Post date:** [February 28, 2017, 9:55pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/58 "2017-02-28T21:55:06Z")

</div>

> [@apollonia](#):
>
> And what solutions do you have, other than just telling us we’re all shockingly naive?

I’m sure his solution will be to reiterate how shockingly naïve we are.

---

<div class="post-metadata">

**Author:** ![RTFirefly](https://avatars.discourse-cdn.com/v4/letter/r/c77e96/32.png) [@RTFirefly](https://boards.straightdope.com/u/RTFirefly)\
**Post date:** [March 14, 2017, 6:55pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/59 "2017-03-14T18:55:34Z")

</div>

Got an interesting one today, for someone with same lastname, but different first initial, so I’m really not sure how it came my way. It was an invoice showing that he’d paid for some tix for a game this weekend in the Women’s NCAA tournament.

The really weird thing was, the guy’s _real_ email was printed on the invoice! And his email was nothing like mine - it was based on his street address. (Which I know because his name and address are on the invoice.)

I emailed the sender (a college athletic department) back, cc’ing the email on the invoice, noting that if they were going to send the tickets by email, they should send them to the email on the invoice, rather than mine, because I wasn’t that much of a basketball fan, the game was going to be halfway across the country from me, and the guy who paid for them would surely enjoy them more than I would anyway.

They responded (to both addresses, thank goodness!) by telling me the tix would be available for pickup at the site of the game, with details to follow in another email.

If they send me that email without cc’ing the other guy, I’ll forward it to him. Don’t want him to miss his game. 🙂

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [March 14, 2017, 9:21pm UTC](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753/60 "2017-03-14T21:21:23Z")

</div>

> [@erysichthon](#):
>
> I’m sure his solution will be to reiterate how shockingly naïve we are.

It is certainly not hard to come up with a non-identifying user name. Why bother telling someone _so incredibly obvious_. I assume Dopers are smart enough to figure out such trivialities on their own (esp. based on User Names here).

[Previous page](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753.md?page=2)

[Next page](https://boards.straightdope.com/t/do-other-people-get-bombarded-with-emails-for-people-with-similar-names/780753.md?page=4)
