My personal e-mail address has been spoofed (not hacked). It has been used by crooks purporting to sell Viagra from a site in Russia, and uses my address as their “from” e-mail address. Now, another crook is doing the same with a work-from-home scheme. Again, this is not “hacked”…that is, they did not break into my account and they are not sending to my address list.
I’ve contacted my ISP, http://1and1.com, and they offer nothing. I understand there is a process called SPF that has some impact on preventing spoofing, but it is not offered by 1and1. http://faq.1and1.com/e_mail/general/9.html
I researched this when it first occurred a few years ago, and found there was nothing that anyone is doing on about this issue, other than–as I understand–the weak and underutilized Sender Policy Framework.
I even “turned off” my personal e-mail address for several months, and that still did not resolve the problem. The address in question is my name, so that makes this issue very difficult for me.
What is the current state of anti-spoofing efforts? Is there any hope?