Helping people with computers... one answer at a time.

Spammers harvest email via a variety of means. One of the most common is to simply surf the web and look for anything that might be an email address.

So many discussion forums and technical assistance sites, including yours, ask for an email address to post comments, and yet friends tell me never to put my real address in. Sometimes I need to include my email address as part of my comment or question, but I'm told that's even worse! Why is that, and what should I do?

The why is easy.

The what to do? Not so much.

Why is it a bad idea? In a word, spam.

Anything that will put your email address on to a publicly accessible web page will, in all likelihood, cause you to start getting more and more and more and more spam. Why? Because one technique that spammers use is to visit all the web pages that they can, and collect anything that looks like an email address to add to their mailing list.

Here's an example: muchspam@ask-leo.com - now that I've published that email address on the web on this page, even though it's the only place that email address has or will be officially mentioned, it will now start getting spammed. Just because it was published on a web page, and it looks like a valid email address.

So when you include your email address in an on-line posting - say on a discussion board, or even in a comment here on Ask Leo!, you're almost literally asking for spam.

Don't do it.

In my case, you'll notice that in order to post a comment on Ask Leo!, you're required to provide an email address. But notice also, that that email address is not published on the web page (in my case, if you use a valid email address, it's simply a way for me to follow up with you directly should I have a question about your comment). But be careful - not all weblogs and discussion forums hide your email address. Many turn right around and put it on the web page for all to see. Including the spammers.

Before you post anywhere be sure you know what's going to happen to your email address when you do.

Are you a member of a mailing list? Does that mailing list have an on-line archive? Then your email address may be available to the spammers for harvesting. Ever post on Usenet? The email you used is probably already in the spammer's lists. An early Usenet post "before I knew better" is the reason my wife gets hundreds of spam per day.

So use a fake address - or better yet, don't use one at all.

Now, what if you need to post your email address in a publicly accessible place? There are several techniques for obfuscating the address. Here are a couple of my favorites:

askleo at gmail.com
askleo@gmail.seeohem

The first you've probably seen already in other places. It simply requires that you, as a human, realize that the " at " needs to be replaced with "@". My fear is that this technique is also fairly easy to decode by computer, and the spammers will soon catch on.

The second requires some thought. If you sound out "seeohem", you'll realize that it sounds like c, o, m. "com". Hence you realize that the ".seeohem" really means ".com" and can make that translation when you type in the email address.

The biggest drawback to these approaches is that the email links are not clickable. Anything you can click on to get an email address, the spammers can use to harvest it. Even copy-paste doesn't work, for exactly the same reason.

But protecting yourself from spam is important. And not asking for more, is even more important.

Article C2397 - August 3, 2005

Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

Recent Comments
34 Comments

I have personally used the at and the dot on several of the webpages I have put together. This works pretty well, but as you said, the logic should be pretty easy to automate for spammers. I like the idea you proposed for the seeohem, but I would wager that over 50% of people would have a tough time figuring it out. If its a serious website, that's not a risk I want to take.

Posted by: bayan eskort at October 27, 2010 12:56 PM

When I personally recommend the blog and forum comments, I do not mean to go out there and find a lot of blogs and leave random comments like, "I found this on Google and I can say, outside the great post!" And then proceed to leave the keyword as your name and link to an inside page.

Posted by: Toledo Attorneys at October 29, 2010 8:03 AM

Here is an elegant trick to stop spam
http://woikr.com/howto/post-an-email-address-on-your-website-without-the-fear-of-spam

The best part is it displays the email address in a proper format :)

Those techniques encodes your email address using Javascript - many if not most forums and commenting systems will not let you post Javascript.
Leo
31-Jan-2011

Posted by: Chirag Gupta at January 31, 2011 2:28 AM

You are right about that! But for the forums that do allow it's great :)

Posted by: Chirag Gupta at January 31, 2011 9:58 PM

when i post comments in forums or join websites,i use an email address that created specifically for those reasons,knowing it'll be flooded with spam. i listed it here as well btw//thusly the name i used for it.random-junkmail.it's via gmx.com which i reccommend btw//anyway..i empty the inbox and spam folder and trash once a month./that's the only time i log in to it.once ina while i'll get email there from one of the sites i joined.but it's still worth keeping a seperate address for spam.the sites i joined don't send out any direly important emails anyway/

Posted by: Dennis at December 2, 2011 8:43 PM
Post a comment on "Why shouldn't I post my email address in a public forum?":





Remember Me?

(You may use HTML tags for style)

Before commenting, please...

  • READ THE ARTICLE. A comment that shows you didn't will be deleted and ignored.

  • Comment only on the article. Use the search box at the top of the page if you have a question about something else.

  • NO PERSONAL INFORMATION in the comment. No email addresses. No phone numbers. No physical addresses.

  • Anything that looks the least bit like spam will be deleted. Links to unrelated sites or links that appear to be primarily promotional will be deleted, or the comment will be deleted.

  • Don't ask me to recover lost passwords or hacked accounts. I can't. Those comments will be deleted.

  • I can't respond to every comment. And I can't vouch for the accuracy of others who do.

Please wait. Your comment is being processed ...