4 ms·

I have a .com domain that I have been using for many years where a catch-all e-mail is configured. Since some time someone was creating fake Spotify accounts us

by mrtksn 3y ago

I have a .com domain that I have been using for many years where a catch-all e-mail is configured. Since some time someone was creating fake Spotify accounts using my domain. I don't have configuration error, no malware or anything like that and I contacted my e-mail service provider Zoho to check this out and they are positive that the e-mails I'm receiving from Spotify are authentic and there's no breach on their part. I also contacted Spotify and they are absolutely sure that it's not possible to create accounts without confirming e-mails and can't do anything about it. I have no idea how these accounts are created without me confirming the e-mail address but they are obviously fake, like a common name and numbers @mydomain . So I used the forgot my password option to log in to check out what those accounts are doing and they were listening some obscure songs. At some point, the person running the scheme decided to move to another domain as I received e-mail address change mails, they moved to some random .xyz domains. Still keep receiving "3-months for free" promo from Spotify for those fake accounts. https://dropovercl.s3.amazonaws.com/208ea6fc-821c-4d51-8c46-718fc1eeb677/4b30d065-f56d-4ebd-b13b-3fc260d232c3/4d5f0c4e-7fc5-4703-9958-493a675272bd.png https://dropovercl.s3.amazonaws.com/208ea6fc-821c-4d51-8c46-... So yep, I'm sure there are many scams going on in Spotify.

matteason 3y ago
> I also contacted Spotify and they are absolutely sure that it's not possible to create accounts without confirming e-mails and can't do anything about it. Yeah that's not true. We discovered someone was using my son's email address for their Spotify when he tried to register for an account. There are plenty of other accounts of this happening: https://community.spotify.com/t5/Accounts/Why-Does-Spotify-NOT-verify-new-account-email-addresses-I-DID/td-p/422194 https://community.spotify.com/t5/Accounts/Why-Does-Spotify-N... It might be fixed now, but what you're saying was definitely true for a good few years.
- mrtksn 3y ago
  Notice How I keep receiving Spotify promotions for the fake accounts created on my domain. Does this look like Spotify did something about it? Whatever, I'm not going through all this BS again. Spotify has it's own "Spam box" because it is possible or was possible to create Spotify accounts without verification and a subset of it is created on my domain and I'm not going through the process of fixing up the Spotify's fake account problem. Someone created these, I tried to inform Spotify about it and if they are find with paying for the streams these accounts (probably) generate, it's all fine by me.
  - matteason 3y ago
    Yeah, ours was to an email account I'd registered for my son but wasn't checking regularly. Once we found out someone else had used it for Spotify I found loads of marketing spam from them in the inbox. I think it is fixed for new accounts but they obviously haven't bothered to go back and verify everyone who registered before that change.
kogir 3y ago
This happened to me on one of my domains, and Spotify support was similarly useless. I finally resolved it by resetting the passwords and deleting 5-10 accounts a day, until the spammers decided continued use of my domain wasn’t worth their time.

by mrtksn 3y ago

matteason 3y ago

> I also contacted Spotify and they are absolutely sure that it's not possible to create accounts without confirming e-mails and can't do anything about it. Yeah that's not true. We discovered someone was using my son's email address for their Spotify when he tried to register for an account. There are plenty of other accounts of this happening: https://community.spotify.com/t5/Accounts/Why-Does-Spotify-NOT-verify-new-account-email-addresses-I-DID/td-p/422194 https://community.spotify.com/t5/Accounts/Why-Does-Spotify-N... It might be fixed now, but what you're saying was definitely true for a good few years.

mrtksn 3y ago
Notice How I keep receiving Spotify promotions for the fake accounts created on my domain. Does this look like Spotify did something about it? Whatever, I'm not going through all this BS again. Spotify has it's own "Spam box" because it is possible or was possible to create Spotify accounts without verification and a subset of it is created on my domain and I'm not going through the process of fixing up the Spotify's fake account problem. Someone created these, I tried to inform Spotify about it and if they are find with paying for the streams these accounts (probably) generate, it's all fine by me.
- matteason 3y ago
  Yeah, ours was to an email account I'd registered for my son but wasn't checking regularly. Once we found out someone else had used it for Spotify I found loads of marketing spam from them in the inbox. I think it is fixed for new accounts but they obviously haven't bothered to go back and verify everyone who registered before that change.

kogir 3y ago

This happened to me on one of my domains, and Spotify support was similarly useless. I finally resolved it by resetting the passwords and deleting 5-10 accounts a day, until the spammers decided continued use of my domain wasn’t worth their time.