Emusic.com Subscriber email Addresses and Spam
Nobody knows my address, so...
Looking through my mail server logs, more and more frequently I spot one of those:
May 9 09:52:01 kronos sm-mta: l497pxf7027811: ruleset=check_rcpt, arg1=<eXXXXXXXXXXXX@example.org>, relay=brasilis-200-170-174-135.static.ctbctelecom.com.br [188.8.131.52], reject=550 5.7.1 <eXXXXXXXXXXXX@example.org>... Rejected: 184.108.40.206 listed at zen.spamhaus.org
...where "eXXXXXXXXXXXX@example.org" would be the email address I had given to emusic.com back when I signed up there. Oh, of course I gave this special address *only* to emusic. I've searched around and noted others (here and here) who noticed the same thing. So, emusic is giving out subscriber email addresses to spammers? Let's look at it a bit closer...
Chris Gagne, who has contacted emusic, got a reply that there was no security breach. As he says, we didn't expect any other reply, because what company would admit to having their servers pwned?
- All the record (or other) companies they sell stuff from
- Credit card companies, anyone working with credit card processing with them
- Technical partners of them
- "Co-branding" partners
- law enforcement agencies etc. who ask for this stuff officially
- any law or contract related stuff they see fit
- quoting: ``affiliates, subsidiaries or joint ventures ("Affiliates") so that they can promote their products'' -- you should be able to opt-out of that, but (again quoting): ``their use of such information is subject to their own privacy policies''
- quoting "trusted third parties" and again quoting "their affiliates and partners" -- there seems to be some talk about "opt-in" with that
- Anyone who links to emusic.com
- Other users of emusic.com if you open your profile to them
- if emusic.com goes belly-up or sells out, they are happy to make some last cash on their address list (very mean paraphrasing here, but read for yourself)
Is there any person or company on this world who they wouldn't give your personal information to, based on this list? Hey emusic, I linked to you, can I have Chris' email addy now? Especially interesting is the point about "trusted third parties" and "their affiliates" . Assuming they really could "trust" any of their chosen third parties, but they also have no problem with your information ending up at the affiliates of those third parties, whoever they are. Might be that they trusted someone who didn't have much problems affiliating with whoever is abusing pwned brasilian servers to send out junk mail.
The choice of server shows IMHO that this is no legitimate business operating on a strict opt-in list. It's some backyard operation trying to hide their traces. Good company you got there, emusic with your "affiliates". Speaking of "opt-in" and "opt-out": I'm pretty sure I didn't opt-in to receive any sales information and that I "opted out" of receiving anything whereever I could.
Just to make things clear: I really had liked emusic (and the music they sell), I only stopped using them because the subscription scheme didn't work out for me. I don't like getting more spam though and I don't like companies who treat my personal information like this.
Life in Athens (Greece) for a foreigner from the other side of the mountains.
And with an interest in digital life and the feeling of change in a big city.
Multilingual English - German - Greek.
Main blog page
It rained in September
Some of the most sought after posts, judging from access logs and search engine queries.
Apple & Macintosh:
Security & Privacy:
Athens for tourists and visitors:
Life in general:
How the heck do you get Emusic to stop stealing your money. I told them to cancel. They refunded my money then took it out again the next month. And continue to do so.
Stephen, how the heck should I know? I managed to unsubscribe, so I have no relation to emusic any more. In the worst case call your credit card company.
Not happy with emusic I singed up and was never able to download any music. I was charged$95.90. I want a refund, was supposed to be $9.99?
Betty, frankly I'm sorry for you, but I can't say I could do anything to help you - you're simply telling the wrong guy. If you have a problem with payments, get in touch with your credit card company, not me. I never had a problem with either payments or downloading music from emusic.
I signed up, got billed, and cancelled. So far, no additional billing, but...
I have OPTED-OUT of their emailings 5 times now over the past month, yet I continue to receive their emails!
..so, every email they send me gets reported as SPAM.
I downloaded a few songs, but their subscription model didn't work for me, either.
What I don't like is the fact that apparently I cannot opt-out from their email lists.
This starts to get silly. Peter, I'm not emusic. I have no affiliation with them, I'm not even a customer any more. Before you fill out any form on the web, please read what's on the screen in front of you, writing this stuff here won't get you anywhere.
I've turned that phrase in your post into a link to the emusic faq. Maybe someone gets the clue.
Back on topic, I used to be an emusic.spam, oh, I mean emusic.com, subscriber, and I changed my unique, specific-to-emusic email address with them three times to avoid getting spam. I never made my emusic.com profile public, nor did I ever use those email addresses elsewhere. I think they wanted the last laugh, though:
I finally cancelled my subscription because they introduced a Canadian version of the emusic site (I am resident in Canada) and thereby increased the price for me by 30% (no extra downloads, just a higher price!)... and now a couple of weeks after cancelling I just got another spam message (a variant of the "Nigerian Money Laundering" type) on the latest email address I used with them. I guess that serves me right for cancelling, eh?
Hey David, thanks for getting back on topic :-)
Interesting, maybe they sell those addresses to the spammers only after people left. Also if this was recently, it would mean that it wasn't a one-off "oops, we did a mistake" thing (as some blog posts/comments somewhere hint - gotta find that page again). It would mean that they really mean this as a "business practice".
I just got a 419 scam at an address only given to eMusic. I guess there trusted third parties and their affiliates are working out of Nigeria now.
Probably they got an urgent call for help from someone who was some ex-generals wife and who they just *had* to trust! Who could blame them?
My son, who admittedly is aged 15 and so should not have subscribed to emusic according to their regulations, recently heard about them and thought it would be a good idea to downlaod some music from them. But he gave up before he had completed the registration process, and forgot all about it until he read his bank statement a few weeks later, by which time they had already deducted £21.98 for two monthly subscriptions. Yet when he went back on to their website, sure enough he discovered that his account had not been set up and he was therefore not able to download any music!
I patiently pointed out to them that they should not be taking money off minors, yet they refused to give more than a partial refund, in spite of the fact that NO music was downloaded, and it would have been illegal of course for my son to have downloaded it. Sounds like they are desperate to make money honestly or dishonestly - are they dodgy or what?!!
pl stop taking subcription as i have not downloaded any thing so far
Further more, speaking to an artist who has sold quite a few albums on eMusic.... yeah, he still hasn't seen a penny after years. eMusic doesn't pay the little guys even if they sell a bunch of stuff (I recharged my account to buy more from the same band.... they didn't a penny).
I have had 3 emusic accounts over the years, used unique addresses for each. Suddenly a few days ago all 3 started getting 100+ spams a day.
I'm 99.9999% sure it's some artist whose mp3 i downloaded who has had their computer compromised by an email harvester. Just like almost every other piece of spam in the world. I think I downloaded tracks from the same artist/label all 3 times.
And for the record, all 3 times I cancelled emusic everything went fine. I think some people just don't know how to follow directions.
Hi there, I created a unique email address for emusic.
During the last 6 weeks almost 400 spam mails on this address. That's almost 95% of all the spam I received.
Just like to add a "me too". I signed up with a unique email address and now I have a whole bunch of spam sent to that address. Don't know if it started happening before or after I cancelled my subscription. Not cool. Thanks Emusic! Somebody should look into this. I was thinking maybe it was a once-off security breach or a disgruntled or dishonest employee but perhaps it's corporate policy which would be, eww!
Like Anthony, my spam just started this week - sent straight to my unique address for them - emusic.com@...
What a way to encourage new customers!
Same problem... I'm really ready to spend time and money to kill them. I hate this f*** company that is filling my mailbox everyday ( about 10 spams a day ).
What can we do ?
I used a unique address when registering for emusic and am getting tons of spam on that one as well.
I 'fixed' it by setting a rule in my site admin panel to redirect everything addressed to that unique address to email@example.com.
Not sure if they even read that alias but I had fun setting the rule ;)
to accounts department i would like to know why you have taken £9.99 from my account when i have never been a member or have never purchased anything from yourself s i had never even heard of your company before seeing it on my bank statement. I would like to know how u got my bank details. this is a very serious matter and before i take it any further i am giving u the opportunity to resolve this matter in a reasonable and timely fashion i anticipate a speedy response regards john carter
take me off your list cancel my email from your list thanks not what i was looking for
You can trackback to: http://betabug.ch/blogs/ch-athens/606/tbping
There are no trackbacks.