Hacker News new | ask | show | jobs
by canadapups 2794 days ago
When it comes to email spam or fake email accounts, Google not only allows it, they enable it. One scammer can setup thousands of gmail accounts and google doesn't blink an eye. Gmail also allows "scammer+1@gmail.com" and "scammer+2@gmail" to be the same account. I've reported obvious gmail abuse to Google through their channels, but nothing. Same scammer keeps coming back with new email accounts.
4 comments

>Gmail also allows "scammer+1@gmail.com" and "scammer+2@gmail" to be the same account.

This is a well-documented feature that has many legitimate uses. If you're trying to stop fraud, clip any gmail addresses after the +. For example, I believe Facebook does this.

I do clip it. I have to do many other things too (spending time and money) to counteract scammers usage of google's services. Given google's ability to track people, they'd could do more against fraud, instead of letting scammers use their services freely (hence my comment of them enabling scammers).
Can't spam detection check if it's the same email with a +1? Seems pretty straightforward.

There's no scarcity in available email addresses. If your security depends on people not being able to register new emails, you've already lost.

Tagging email with + has been a feature of email forever, and has nothing to do with Google. Their service would be broken if they didn't support it.
So, you've basically outsourced your spam detection to Google, and you're here complaining that you have to do a few small things on your end?
No, my point is Google allows and/or enables fraud and they could be doing more to fight it. Source: the article we are discussing, "How a Massive Ad Fraud Scheme Exploited Android Phones to Steal Millions". And my experience with scammers using Gmail.