How to Trace Who Leaked Your Email Address

Ever received spam and wondered how they got your email? With the dot trick you can give every service its own address "fingerprint". When spam shows up, you instantly know the source.

The idea

Each service gets one unique dot variation. Since only you know the "service → variation" pairing, the address in the incoming email reveals the source.

Practical steps

1. Open the generator and produce all dot variations of your username.
2. Label each variation ("Label" feature in the results list) and download as CSV to keep a record.
3. Use a different variation when signing up to each important service.
4. When a suspicious email arrives, check the "To" address. Match it against your CSV.

Example

You sign up to a store using yo.urname@gmail.com. A month later gambling promos arrive at that exact address. Since only that store has that variation, you know your data leaked from them - strong evidence to stop using that service.

Note

Some services normalize dots (see does it still work in 2026). Combine with a service-specific password for extra safety.