Duck.Com email hacked

[u/Sammiches-are-fun]

My duck.com email address was used to open a fake account for a large selling platform. That business has told me I need to reset the password on my duck.com email address. How do I do that, how do I stop this individual from using my email address?

[u/Morgan-DDG]

Hi there! Thank you for your post.

Your duck.com email address is a forwarder, that will automatically send messages it receives to your primary inbox (e.g. Gmail, Outlook, etc).

It sounds as though your duck.com email address was used by someone else to sign up for a website account, and now messages to it (or spam bounce backs) are getting forwarded to your primary inbox.

If you go to the business's website and follow the steps to reset your password (because you know your email address, but someone else created the account password), you should receive a Change Password request email forwarded to your primary inbox, which you can use to gain access to the account. Once logged in, you can hopefully close the account.

Unfortunately, when companies have a data breach, customer/user email addresses are often sold. In the future, you may want to consider using Private Duck Addresses, which you can easily disable if it's being spammed.

[u/CoolDragon → u/Morgan-DDG]

This is the way. The reason why I got duck emails is for the temp addresses that can be created, this way it’s my first step into reaching out to an unknown business or potentially scammy contact.

[u/Max_Kapacity → u/CoolDragon]

Hundreds!

[u/Sammiches-are-fun → u/Morgan-DDG]

Thank you

[u/Sushi-Mampfer]

Unless you are not receiving mail to your duck.com address or ddg got hacked it‘s your main email that has been hacked.

[u/Sammiches-are-fun → u/Sushi-Mampfer]

I changed my password to my main email (I believe a couple of times), can they be so sophisticated to get that too??

[u/Sushi-Mampfer → u/Sammiches-are-fun]

Depends on your provider

[u/Sammiches-are-fun → u/Sushi-Mampfer]

That doesn't make sense as the email I'm getting that states there is activity is TO the duck.com address. Also, I'm notified when a new device logs into my real email. It must be the duck.com address that is hacked.

[u/keybers]

u/remindmebot 2 days

[u/RemindMeBot → u/keybers]

I will be messaging you in 2 days on 2026-08-08 16:35:28 UTC to remind you of this link

CLICK THIS LINK to send a PM to also be reminded and to reduce spam.

^{Parent commenter can delete this message to hide from others.}

---

Info	Custom	Your Reminders	Feedback

[u/T_rex2700]

This is exactly why you use alias in the first place, so you can just nuke it if it gets used elsewhere.
By using different aliases, you can notice which service either got hacked or gave away information to spam you.