I own a domain, which I will call example.com.
In June, I received an email, purporting to be from the Play Station Network, addresses to firstname.lastname@example.org. (I receive all the email for the domain. "First" and "Last" are distinctive names which are not my name.)
It was an account registration confirmation. I wasn't sure how anyone could have signed up as email@example.com, as it's my domain and most web sites require a confirmation link to be clicked.
I changed all my passwords, just in case.
firstname.lastname@example.org then opened a PayPal account and has been successfully sending small (~$10) payments to MicroSoft Payments and other vendors. No money has been stolen from me, yet, so I have no reason to involve the police.
I sent these emails to PayPal's fraud address, but I was ignored.
Today, I have received multiple emails from PayPal saying that "my" bank has declined payments. Once again, no money has been stolen from me.
What is going on? I am nervous that I am being targeted for a scam.
If they actually had access to my email account, they could have reset my passwords and stolen a few domains from me. This has not happened.
Are any of the emails that I've received at email@example.com actually from the purported senders? They all seem to come through mail2world.com and have a open, red padlock in gmail.
Who can I contact about this to have it stopped? PayPal do not respond. Should I contact the companies they've paid?