Gunfighter wrote:
whoever is sending them must have access to the VM system.
That's not the case at all. Obtaining email addresses from data breaches is just one of the many ways your email address can fall into the wrong hands
Here's a link that gives a nice summary of some of the many ways that spammers and scammers can get your email address. https://clean.email/blog/email-security/how-email-spammer-gets-your-address (but see my comment at the end of this post)
Scroll down to the section "How Do Spammers Get Your Email Address?" and it lists 6 ways which spammers / scammers can acquire your email address without having access to your email provider's data.There are others as well, malware on your device for example.
I am not suggesting you should use the Clean Mail product. I never have and I am not recommending anyone to use it. I have posted their link simply because it provides a nice straight forward summary of the situation.
Coenoby