Email reply from Yahoo! Web Hosting (July 19, 2007) regarding spam that fraudulently uses my domain.
Thank you for writing to Yahoo! Web Hosting.
I welcome the opportunity and would be glad to assist you regarding your concern.
Eric, I understand your concern regarding the receipt of returned emails from your own domain based email addresses, which are not sent by you.
I apologize for the inconvenience this may have caused. Unfortunately this is a sad case of people abusing the Internet.
I assure you that, your Domain has not been hacked. It's safe on Yahoo! Servers!
Before I can provide you any solution, I would like to explain the whole matter in length. This would help you in understanding what all goes behind such spam emails and how these can be tracked and eliminated, if cannot be eradicated.
Spammers are now using methods, which enable them to:
1) Send spam mails to mass email addresses.
2) Set the failure deliveries to valid domain names.
3) Pretend as if these mails are coming from some other user's domain, like yours.
They send these spam mails from their own servers. Since, they have sophisticated softwares which enable them to redirect any failure delivery to your domain name, this makes genuine users like you to feel as if some one had accessed your account and sent these spam mails from your account.
As a matter of fact, lots of ISPs are also involved in such money making activities, this really makes the task of locating the spammer difficult.
Unfortunately, as these are not being sent by Yahoo! servers and are not going through our services, there is little that can be done about this.
We are unable control the settings of other ISPs to force them to make sure senders are fully valid.
However, it does not mean that this battle with spammers is lost. We have been able to give an effective solution for this issue to some other users. I would encourage you to use the Yahoo! Spam prevention measures to reduce the number of unsolicited email received.
Measures to control spam:
I. Disabling Catch-all feature: (Most effective solution)
If you are receiving replies at an address that is not set up as a POP account, but have catch-all enabled, you may want to consider turning off the Catch-all feature. You would then only receive replies sent to email addresses that are actually set up as POP accounts.
To turn off the catch-all mailbox:
1. If you are a plan owner, go to the Manage My Services console and click "Email Control Panel." If you are an administrator, sign in to your Yahoo! Business Email account and click "Mail Options" in the upper-right corner of the page, then choose "Manage Email Addresses."
2. At the bottom of the page, select <no mailbox selected> from the
pull-down menu labeled "Catch-all Mailbox."
3. Click "Submit."
II. Using the Yahoo! Spam prevention tools:
All mail originating from Yahoo! has an originating IP address embedded in the full address headers. This address helps to identify the sender of the email and track the individual to his or her service provider.
Individuals who use a Yahoo! address in their spam are forging mail headers if the originating IP line is absent in the spam.
1. Report Spam:
If the spam or abusive email is being sent from a Yahoo! Mail account (such as firstname.lastname@example.org), the spam report will receive special attention. We will evaluate the message and take appropriate action as specified in our Terms of Service. You can check the full header of the email to determine where the email actually originated. In case it is a Yahoo! email address, please forward the unsolicited email with full email headers to the following email address for review:
Please include an unedited copy of the original message along with the full Internet headers. To learn how to display full headers in Yahoo! Mail, please visit:
If you receive unwanted mail from a non "@yahoo.com" address, you may try contacting the sender's email provider by identifying the sender's domain and contacting the administrator of that domain.
Yahoo! has no control over activities outside its service, and therefore we cannot take action in these situations. The sender's provider should be in a better position to take appropriate action against the sender's account.
If you have any further questions about spam, please see the Yahoo! Mail AntiSpam Resource Center web site at the address below:
In addition to above, Yahoo! Business Mail offers several tools to help you keep spam out of your Inbox. Yahoo! has consolidated several of these tools under the "Spam" button, located above the "From" address in every message, to help you combat unwanted messages faster and more efficiently.
2. "Spam" and "Not Spam" buttons:
When you click the "Spam" button, you will receive a page explaining the options. Messages you mark as spam will be reported to Yahoo! and deleted from your Inbox. To have all senders of spam blocked, check the box next to "Automatically block the sender of messages that I mark as spam". Not checking this box will block the sender of the current
Please note: If you accidentally marked a messages as spam, you can reverse the selection by doing the following:
1. Log into your Yahoo! Business Mail Account
2. Go to your "Trash" folder by clicking on the "trash" link
3. Open the message you marked as spam
4. Click the "Not Spam" button
In case, you still continue to face this issue, please let me know. I'll be more than happy to help you.
I value you as a customer and look forward to serving you for years to come and hope that you are enjoying our services as much as we enjoy bringing them to you.
Please do not hesitate to reply if you need further ssistance.
Have a great day!
Yahoo! Customer Care
Original email I sent to Yahoo:
On July 17 and July 19, I received 2 (sic) emails marked
"Undelivered Mail Returned to Sender" at my "musicalsandconspiracy.com" email account.
The emails were addressed to two (sic) users who I am unfamilar with. They are: "email@example.com" "firstname.lastname@example.org" and "email@example.com"
The only user I have authorized for my account is for myself at "firstname.lastname@example.org"
Has my email account or website been hacked into? Who are these people? Could you please look into this?
posted: friday, july 20, 2007, 7:22 AM ET
View My Stats