I've heard that fraud sentiment several times from friends of mine who do exactly that with the company name in the email address. They've since moved on to a r

I've heard that fraud sentiment several times from friends of mine who do exactly that with the company name in the email address. They've since moved on to a randomly generated string of alphanumeric characters, this is put into a spreadsheet, and they write down when and where they used it. I'd like to start doing this, but wondering what I would do if I figured out someone had passed the address on or been compromised.