I’ve had my address for three months, and I have 20 cumulative spam units:
Software (12)
Rolex offers (4)
Vicodin (4)
I read the raw header, something I’ve been doing since the late 1970s. Nowhere in the header was my actual account name used. Nowhere.
While the “From:” line and many other parts of headers are trivially forged, if it doesn’t have my actual account name appearing anywhere in it, it can’t be sent to me unless Gmail is doing something evil.
Do you understand this?
Which is why I offered to test your theory. If you can provide the email address that it WAS sent to, I will send an email to that address. And if you get it, then you have proven your point.
Not so at all.
If a spammer sent a mass mailing with “robert.jones@gmail.com” in the “TO:” field, and myriad variations of “robert.jones” in the “BCC:” field, such as “robj@gmail.com”, “robert.j@…” “rob.j@…”, “rjones@…” and on and on, and your account happened to be “bojo23@gmail.com”, which was one of the scads of algorithmically-arrived-at variants, then indeed the header would simply show “TO: robert.jones@gmail.com”, even though it was delivered to your box. It would arrive this way no matter who your mail server is, and Google is not up to any shenanigans. They’re just delivering mail according to the SMTP protocol, although they’re running spam-catching filters to minimize the amount of annoyance this causes you.
Thank you Dopers for confirming that I was not going insane.
My GMail account was the ONE account that had gone nowhere other than to a few friends, and then for invites only. This thing had not been entered into anything (other than Google’s servers) public. And yet today I have 21 messages in my spam box.
All of them are either Vicoden, Rolex or CHEAP SOFTWARE!!!one!!!
The messages are all the same, just with different headers. I’m crossing my fingers hoping that this is just an isolated assault on the GMail accounts…
I started receiving Vicoden, Rolex , cheap software crap right after giving my address away at RollingStone.com
I use my Japanese first name and the first letter of my last name as my address.
This spammer, or the spamming software try to make spams look authentic by adding my first name and some random Japanese last name in the subject, but Gmail’s filter is way smarter so far.
Spammer 0 - 1 Gmail 
I can’t believe you’re considering 6-10 per day to be “tons.” I got more than that on my old netcom account in 1998, when spam was still fairly new. I do a lot of consulting work, and rely heavily on email. My current primary email address has been the same since 1997. I’m getting over 200 spams (and viruses) there per day. I set up a new domain for work three years ago, and my account there is getting more than that.
This is a situation that desperately needs to be fixed. I’m losing business because of misfiltered emails, and still spending hours each week sorting through all of this crap. Spam isn’t just an inconvenience. It costs real money.
Another nice gmail antispam measure is the default non-displaying of remote images, which are typically used by spammers to determine which of their messages are actually being opened, resulting in more spam for the unwary.
I totally agree with Larry Mudd’s explanation, ftg. It’s nothing to do with Gmail. For example, my hotmail account is jjimm@, and I constantly get stuff BCCed to me there, with no instance of my email address in the header, but with the TO: line addressed to stuff like jimmmmmmy, jimy, jjjjjim, jimm, etc. etc.
The one field that is not usually forgable is the Received: header. Do you see that field when you look at the headers?
All other fields of the message (To, From, CC) can contain complete garbage. The last line of the Received header is the only field which can be trusted since it is set by your mail server when it received the message. All other fields can be forged.
In my Gmail box (again, not my main e-mail), it comes from what seems lke randomly-generated Anglo/corporate-sounding names of people that sound like they “work down in accounting”; “Kerri Dolan” , “Sharon Winslow”, “Marci Pratt”, “Darrin Snell” and the like.
It all has titles like something similar to my username Popular software at low low prices and something similar to my username Extinguish pain with codeine. About 50% is for discount software, 40% drugs, 10% other things like mortgage refinancing and replica watches.
As long as the spam goes to the spam box and not the inbox, I don’t worry about it. If it shows up in the inbox, report it.
I’ve been getting the exact same thing on my gmail account as well. It’s kind of weird , but since it goes straight to the spam box, it doesn’t bother me all that much. It’s still better than the spam I get on my hotmail account which is devolving into a combination of symbols which I suspect are trying to sell me viagra or cialis.
I’m thinking I could use some of this valuable spam. If anyone has a spare gmail invite, I’d greatly appreciate it if you could send it my way.
filmore, check your email.
In addition to the Rolex, software, and prescription drugs spam everyone mentioned, I’ve also received a couple of phishing attempts.
And for people who are receiving emails sent to the “wrong” address, Google doesn’t recognize periods (.) in the username when parsing addresses. From their help page (I don’t think links work unless you’re logged in):