Spam from postmaster@mac.com

I have been getting messages from postmaster@mac.com for about a week telling me that the delivery has failed. At first, I assumed that something just didn't go through, but after the 5th time in one day, I looked more closely. All of the emails claim that an email from me failed to send. I looked at my sent folder, and there were no emails. Anyways, I changed my password to make it more complex, but I am still getting 10-20 emails a day informing me that "my email" didn't send. I am assuming that people are sending emails from another account, but somehow they made it look like it came from my email address. How do I stop the constant barrage of emails? Below is one of the many emails sent to me (with my address removed):

Delivery Notification: Delivery has failed

This report relates to a message you sent with the following header fields:


Message-id: <0071e9c4.3453440f46725350@K-R-TARGA-PC>

Date: Wed, 08 Oct 2014 07:23:16 +0000 (GMT)

From: Rechnungsstelle <(my email address)>

To: Christine

Subject: Offene Rechnung: Christin


Your message cannot be delivered to the following recipients:


Recipient address:

Reason: Remote SMTP server has rejected address

Diagnostic code: smtp;550-5.1.1 user unknown Unknown recipient.

Remote system: dns;mx00.t-online.de (TCP|17.172.81.0|45280|194.25.134.8|25) (mailin63.aul.t-online.de T-Online ESMTP receiver fssmtpd2025 ready.)

There are also 2 attachments below each email titled mime-attachment.

What can I do to make this stop


<Personal Information Edited by Host>

Posted on Oct 8, 2014 7:35 PM

Reply
15 replies

Feb 23, 2017 6:45 PM in response to pwjduff

User uploaded fileHey There! I've found a very effective solution and I hope it helps some of you! I just started getting these in 2017! Copy the address listed in the email and save it as a contact. Select the address type as iCloud. Do the same for that pesky "postmaster@mac.com". Once saved go to Settings > FaceTime and scroll down to Blocked and add them to your blocked list!!!

May 2, 2017 7:35 PM in response to pwjduff

Postmaster is apples own mail system bot controller mail overlord thing, it means you sent an email and it failed, or sent it to an email that doesn't exist. and endergamer3680, wouldn't hack iClouds mail controller if I were you. So... To recount, postmaster@mac.com is apple owned mail bot, he checks your emails and replies if it fails or the recipient doesn't exist.

Oct 9, 2014 12:57 AM in response to pwjduff

I'm getting this as well (my email address changed). It's very annoying and despite changing my apple password, it's still happening.


This report relates to a message you sent with the following header fields:


Message-id: <00127d3a.71fefab73ab41c30@user-PC>
Date: Tue, 07 Oct 2014 15:33:47 +0000 (GMT)
From: Katty <xxx@mac.com>
To: Tino123 <tino123@emaiol.it>
Subject: Mi auguro che non si preoccupa?


Your message has been enqueued and undeliverable for 1 day
to the following recipients:


Recipient address: tino123@emaiol.it
Reason: unable to deliver this message after 1 day


Delivery attempt history for your mail:


Wed, 08 Oct 2014 16:59:34 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Wed, 08 Oct 2014 08:56:23 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Wed, 08 Oct 2014 04:53:12 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Wed, 08 Oct 2014 00:50:01 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Tue, 07 Oct 2014 20:46:50 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Tue, 07 Oct 2014 18:43:39 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Tue, 07 Oct 2014 16:40:28 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


Tue, 07 Oct 2014 15:37:17 +0000 (GMT)
TCP active open: No addresses found for host Error: Connection timed out


The mail system will continue to try to deliver your message
for an additional 3 days.



Return-path: <xxx@mac.com>
Received: from tcp-daemon.st11p00mm-asmtp004.mac.com by
st11p00mm-asmtp004.mac.com
(Oracle Communications Messaging Server 7u4-27.10(7.0.4.27.9) 64bit (built Jun
6 2014)) id <0ND500CUKIR9HR00@st11p00mm-asmtp004.mac.com>; Thu,
09 Oct 2014 00:30:45 +0000 (GMT)
Received: from user-PC
(host26-221-dynamic.2-79-r.retail.telecomitalia.it [79.2.221.26])
by st11p00mm-asmtp004.mac.com
(Oracle Communications Messaging Server 7u4-27.10(7.0.4.27.9) 64bit (built Jun
6 2014)) with ESMTPSA id <0ND2006UCZ8BAA10@st11p00mm-asmtp004.mac.com> for
tino123@emaiol.it; Tue, 07 Oct 2014 15:34:05 +0000 (GMT)
Date: Tue, 07 Oct 2014 15:33:47 +0000 (GMT)
From: Katty <xxx@mac.com>
Subject: Mi auguro che non si preoccupa?
To: Tino123 <tino123@emaiol.it>
Reply-to: ekaterina12lisu727@gmail.com
Message-id: <00127d3a.71fefab73ab41c30@user-PC>
MIME-version: 1.0
Content-type: multipart/mixed;
boundary="----=_NextPart_000_00C0_6C7E2FEB.43DA6BF3"
X-Proofpoint-Virus-Version: vendor=fsecure
engine=2.50.10432:5.12.52,1.0.28,0.0.0000
definitions=2014-10-07_05:2014-10-07,2014-10-07,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=8 spamscore=8
suspectscore=1 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0
reason=mlx scancount=1 engine=7.0.1-1402240000 definitions=main-1410070142


------=_NextPart_000_00C0_6C7E2FEB.43DA6BF3
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable


Ciao!=20
Ho trovato il vostro profilo sul sito di incontri twoo.com.=20
I'm lloking per un uomo buono. Se un interessante prego di scrivere. Il mio=
nome =C3=A8 Katty.=20
Postscript in attesa di vostra risposta.


------=_NextPart_000_00C0_6C7E2FEB.43DA6BF3
Content-Type: application/octet-stream;
name="hi!!!.jpg"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="hi!!!.jpg"


/9j/4AAQSkZJRgABAQAAAQABAAD//gA7Q1JFQVRPUjogZ2QtanBlZyB2MS4wICh1c2luZyBJ
SkcgSlBFRyB2NjIpLCBxdWFsaXR5ID0gOTMK/9sAQwACAgICAgECAgICAwICAwMGBAMDAwMH

Feb 5, 2015 3:01 AM in response to pwjduff

When people receive emails which appear to come from their own address but they haven't sent they naturally tend to be concerned: however it's most unlikely that anyone has hacked their account, they've just been targeted by one of two common spammers' techniques: both arise because it's all too easy to forge the 'from' address on messages to be something other than the real one.


There are two things that can happen. One is that the sender has forged the 'from' address to be the same as the 'to' address (so other people will see it coming from themselves, not you), presumably in the hope of confusing spam filters. It's harmless, if extremely annoying. Delete it (never ever answer spam or try to unsubscribe from it), and you don't need to be worried about it.


The other problem, which seems to be the one affecting you, is that a spammer is forging your address as the 'from' address on a whole batch of messages. The first thing you hear about this is when you start getting bounce messages because the spam has been sent to non-existent addresses and is being bounced to you. There's no point at all in responding to it. It's infuriating but normally stops after a bit as they move on to another forged address.


There isn't really anything you can do about it: closing the account isn't really worth the hassle unless you are totally swamped, because you will have to tell everyone your new address. Apple can't really do any more than they already are about spam.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Spam from postmaster@mac.com

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.