Reporting abuse

This article is for people who are not inboxy users and have received unwanted mail from an @inboxy.net alias.

If you are an inboxy user and want to retire one of your own aliases because it leaked, you do not need this — go to Account → Addresses and click Retire.

What inboxy is

inboxy gives our users disposable email aliases at @inboxy.net. The aliases forward to the user's real inbox, or accumulate in a daily digest. The user's real email address is never exposed to senders.

This means:

• Every @inboxy.net address has exactly one human behind it.
• We can identify which inboxy user owns any given alias.
• We can retire an alias on report — incoming mail to it will bounce within minutes.
• We cannot tell you who the user is — that's the whole point of the service — but we can act on the alias.

How to report

Email abuse@inboxy.net with:

1. The @inboxy.net address that sent the unwanted mail.
2. A copy of the offending message (full headers preferred — View source or Show original in most mail clients).
3. What you'd like us to do — typically "retire this alias and prevent any future mail from it."

What happens next

• We acknowledge within 72 hours (usually much faster).
• For straightforward cases (spam, harassment) we retire the alias and email you when done.
• For complex cases (defamation, threats, content that may require law-enforcement involvement) we may contact the inboxy user behind the alias, retain message records longer than usual, and / or refer the matter to the appropriate authority.

Law enforcement requests

Lawful requests from a competent authority go to legal@inboxy.net. Process and timelines are documented in our Transparency Report (lands at first report cycle).

What we will not do

• Tell you who the inboxy user is, absent a lawful order or imminent risk to life.
• Reverse-resolve the alias to a real address.
• Forward your message to the user "to give them the chance to apologise" — that route is for the user to decide via their own reply.

False reports

If you report an alias used legitimately by an inboxy user (e.g. you are the sender, you sent transactional mail the user signed up for) we will not retire the alias. We may suggest that the user unsubscribe at source if they want the mail to stop.