Spammer is using my domain

What action should I take?

[georgeek]

Out of the blue I am getting loads of Delivery Status Notification (Failure) for email I have not sent. Obviously a spammer is spoofing my address, what steps should I be taking to mitigate the damage?

[Dreamquick]

Aside from deleting the bounces there's not a lot you can practically do I'm afraid... (BTW what you're experiencing is often called a "Joe Job" - a google or site search will turn up more resources for you)

In terms of mitigating the damage;

1) Put a notice up on your site which links to a detailed explanation of the problem - you might be able to work out the true source using one of the bounces and something like spamcop (but I wouldn't bet on this).

2) Handle any complaints nicely (even when they are not being nice themselves), possibly referring them to the page you created for (1).

Aside from these its just a case of sit & wait

- Tony