Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

ReliableSource

macrumors regular
Original poster
Nov 29, 2011
108
260
I got a couple of spam emails this morning and the sender was able to spoof the "To" field to some random address tied to a school in Spain:

Screenshot 2025-12-02 at 09.21.49.png


Obviously that "ypsw6vh0" address is not mine; this was sent to my iCloud inbox.

The problem is that I have hundreds of iCloud email aliases, and because they spoofed the "To" field here, I can't narrow this down at all to figure out which of my emails was compromised. Even if I were only using a handful of aliases I'd have no way of figuring out which of them this was actually sent to.

I tried support, and they said there was nothing they could do.

I thought maybe I could set up some rules and folders to try to narrow it down, but the rules don't apply retroactively to emails already received.

So it seems I'm just stuck not knowing which of my emails was compromised, unless anyone knows any tricks I can use to figure this out. Any help?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.