How do spammers get my email address?

There are lots of ways for spammers to obtain your address.

  • Any public source of information will do - they look everywhere and anywhere. This includes social media sites such as Facebook, X (formerly known as Twitter), Instagram, LinkedIn, etc. Web pages are the most common source.

  • Some email lists, news groups, etc. can make your addresses visible and open to being harvested.

  • Website breaches may expose mass amounts of email lists.

  • Dumb luck. Specifically for users who have a common name as an email address, a hacker may just guess it.

  • Addresses are sold as often as possible, especially those that are known to be affiliated with a person.

If you receive an email from someone you don't know, do not click on any of the links. This is a good way for the spammers to validate the address, send you more messages, and sell it as a known good address to other spammers. If you are unsure of the validity of a suspicious message, report it to security@umbc.edu.