Key Takeaways
- Receiving email from your own address is almost always spoofing — the sender faked the "From" field without ever accessing your account
- You can confirm it's not a hack by checking your sign-in activity and your Sent folder
- Immediate fix: mark as spam and block the spoofed sender
- If you own a custom domain, configuring SPF, DKIM, and DMARC significantly reduces spoofing risk
- If your account was genuinely compromised, change your password and enable 2FA right away
Why Am I Getting Spam From My Own Email Address?
If you notice messages sent to you from your own email address, you're likely the victim of email spoofing.
📌 Email spoofing is when someone fakes an email address and/or sender name to make the message appear to be from a trusted source — your boss, a family member, a familiar company, or even yourself.
How this works: the spammer forges the "From" field in the email to make it look legitimate. They also craft the message content to be convincing and may request or demand something from you.
The most disturbing form is when the spammer uses your own email address, making you believe your account has been compromised. In reality, the sender faked the address without ever touching your account.
One common example is the "Hello Pervert" email — the sender claims to have installed spyware on your devices and demands payment to suppress supposed recordings. It's a scam built entirely on a spoofed "From" field.
Have I Been Hacked or Is It Spoofing?
To determine whether you're dealing with spoofing or a genuinely compromised account, you can do some simple investigation: review your account activity, check for data breaches, and look for common signs.
Check Account Activity
Most email providers let you view recent sign-in activity. Here's how to do it for Gmail and Outlook.
Check Gmail Sign-Ins
- Visit Gmail and sign in.
- Deselect any open conversation — in the preview pane you should see "No conversation selected."
- Click Details at the bottom of the preview area.
A window will show your recent activity. Expand Show details for more information, and click Manage Account Access if you see something suspicious.
Check Outlook Sign-Ins
- Visit the Microsoft Account page and sign in.
- Select Security in the left-hand menu.
- Choose View my sign-in activity under Account.
You'll see a list of recent sign-ins. If one wasn't you, select This wasn't me and follow the prompts.
Check If Your Email Was Leaked
You can also check whether your email appeared in a known data breach:
- Have I Been Pwned: Enter your email address and click Check. You'll see whether your address was involved in any breaches, with incident details.
- Clean Email's Privacy Monitor: Sign in to Clean Email and open Privacy Monitor from the left-hand menu. It shows immediately whether your address appears in any known breaches, with details and next steps. Free for all accounts with no limitations.
Signs of Spoofing vs. Hacking
Signs that your account has likely not been hacked and you're dealing with spoofing:
- You can sign in to your account without issue
- You haven't received unexpected password change or reset notifications
- You haven't noticed any account changes or suspicious activity
- You haven't received any security alerts
- Your Sent folder contains only emails you wrote
⚠️ Important: If you see strange account activity, find your address in a breach, or notice the opposite of any of the above, your account may be compromised. See our complete "What to do if your email is hacked" guide.
How Do I Stop Spam Emails From Myself?
Once you've confirmed you're dealing with spoofing, take the following steps:
Immediate steps:
- Mark the message as spam
- Block the spoofed sender — even if the address appears to be yours
- Optionally report the incident to the FBI's Internet Crime Complaint Center (IC3) or the FTC's Report Fraud site
If you own a custom domain: Setting up SPF, DKIM, and DMARC authentication protocols is the most effective way to prevent spammers from forging your domain. See our full guide: How to Stop Email Spoofing.
💡 Inbox tip: Create a filter or rule to automatically archive or delete messages where the "From" address matches your own — so future spoofed messages are handled without manual intervention.
Stop Spoofed Emails Automatically with Clean Email
For ongoing protection without manual work, two Clean Email features are directly relevant here:
Screener holds messages from first-time senders in a review queue before they reach your inbox. Since spoofed emails often come from addresses you've never corresponded with, Screener catches them before they land — letting you Allow or Block with one click.
Privacy Monitor scans continuously for data breaches involving your email address and alerts you when your address appears in a new incident, so you're not discovering a compromise weeks after the fact.
Conclusion
When you get an email that appears to come from yourself, spoofing is almost always the explanation — not a hack. Confirming that with a quick sign-in activity check takes less than a minute and removes the guesswork.
FAQs
Why am I getting spam mail from my own email address?
This usually happens because of email spoofing, where spammers fake the "From" field to make it look like you sent the email. It doesn't mean your account has been hacked — the email only looks like it came from you.
What's the safest action to take when you receive a suspicious email?
Do not click any links or download attachments. Mark it as spam and block the sender. Then delete it to avoid accidentally clicking it later.
Can someone use my email address without me knowing it?
Yes — spammers can spoof your address without accessing your account. They're only pretending to send emails as you.
What if I get a threatening email from my own address?
Do not reply. Mark it as spam, report it to your provider, and if it demands money, report it to the FTC or your local cybercrime agency. It's almost always a scam.
How do I block emails from my own email address?
Create a filter in Gmail, Outlook, or Yahoo to automatically send messages where the "From" address matches yours to spam or trash.
Should I worry if a scammer has my email address?
Not necessarily — email addresses are easy to obtain. Watch for suspicious sign-in activity, phishing attempts, and protect your account with a strong password and 2FA. You can check whether your address was exposed at Have I Been Pwned.
Can I stop my email from being spoofed?
If you use a custom domain, yes — setting up SPF, DKIM, and DMARC significantly reduces spoofing risk. For personal accounts (Gmail, Outlook, Yahoo), the best defense is strong spam filtering and blocking spoofed senders as they appear.
Can a scammer hack my bank account with my email address?
Not with your email address alone — but if they gain access to your inbox, they could reset banking passwords. That's why 2FA on your email account is critical.
