Who Got the Unfamiliar Promo?
Check the Recipient Field for Your Shopping Alias

Got an unfamiliar promo in 2026? First check who it was sent to

You used an email address to sign up at an online store. A few weeks later, an unfamiliar brand’s discount offer lands in your inbox. Your first thought might be, “That store sold my email.” But the sender name, the brand in the message, and the actual recipient address are three different things. First find out which alias received the email; then you’ll know what to check next.

Don’t start by clicking “View account” or “Unsubscribe” in the email. Sign in through a store link you’ve saved yourself, and keep the original message. Note when it arrived, its subject, and any clues about the recipient. Links in unfamiliar emails may track you or lead to phishing pages. Before deleting the message, decide whether you need to keep it as evidence.

This article is about tracing the address, not conducting a forensic investigation. The first thing to establish is which alias the message came through—not to immediately accuse a particular business.

Start with one rule: use a separate alias for each store

An alias helps distinguish sources only if you assign it carefully. If you use the same address first at a clothing store, then on a price-comparison site and for a sweepstakes, an unfamiliar ad leaves you with three possible sources. We recommend signing in and creating a forwarding alias then recording the address and how you used it in notes you control.

• Record where you signed up: the store name, the website domain you verified yourself, and the date you first used the address.
• Note related uses: whether you also used the address for loyalty points, third-party sweepstakes, or an after-sales service.
• Keep a change history: don’t overwrite old entries if a store changes its name, accounts are merged, or you change the email address on file.

A short word in an alias is just a memory aid, not evidence. An address containing “market” doesn’t mean you used it only at a supermarket. What matters is your record of how you actually used it. For a per-store setup, see the shopping alias tracker.

Check service records before the recipient shown in your email app

If the message was forwarded through Tempowl, look for the matching entry in your recent archive in the dashboard. Check the time, subject, sender address, and associated alias. This tells you which recipient alias the service linked to the message when it received it. The 30-day archive isn’t a permanent evidence store, so save any records you need promptly.

Next, open the message details or original email in your real inbox and check the recipient fields. Some email apps show only a friendly name or hide the final recipient address in the details. If you can’t find a matching service record, don’t assume a similar subject is the same message. The record may have expired or been deleted, or the email may never have passed through that forwarding alias.

Keep “matching record found” separate from “no matching record found yet.” The recipient shown in the interface is a clue, but it may not be the envelope recipient used for SMTP delivery.

What do To, Delivered-To, and Received tell you?

There’s no single, universal recipient field in an email header. These three fields are often used to check addresses, but they’re added for different reasons and have different levels of reliability. Fields can be missing, repeated, or hidden. The absence of a field doesn’t mean someone deliberately removed the source.

Received entries near the top are usually added later. To follow the timeline, people often read from the bottom up—but that doesn’t make every bottom entry trustworthy. Treat only entries added by trusted receiving systems as more reliable clues. If headers are unfamiliar, save the original and ask support rather than identifying a source from an unfamiliar hostname.

Forwarding adds another step: don’t mistake the destination for the origin

The store sends a message to your shopping alias; the forwarding service then sends it to your real inbox. Those are two separate delivery steps. Delivered-To added by your real inbox’s mail server may show only your real address; that doesn’t mean the store knew it originally. Conversely, seeing an alias in To doesn’t guarantee every message passed through the expected service.

Compare this route with the dashboard record to distinguish the address you originally gave a website from the destination after forwarding. Address separation doesn’t guarantee anonymity: if you put your real email in your account details, message, or signature, the recipient may still learn it another way.

Three examples: from explained to still unclear

The store’s own promotion: you may still be subscribed

A clothing-store alias receives a seasonal promotion from the store. The sender’s domain matches earlier notices, and the account’s subscription page shows that marketing emails are enabled. In this case, changing your subscription preferences is more direct than investigating who “leaked” your address. A matching display name isn’t enough, though—check the store’s official website yourself to avoid a fake unsubscribe link.

A clearly related loyalty service: note the connection, but still check

A supermarket alias receives an email from a separate loyalty-points platform, and you remember signing up for that platform when registering. Add this use to your notes, then verify the relationship and your subscription settings on the official website. A business connection doesn’t automatically mean address sharing was expected, and a brand’s description alone doesn’t prove the email is genuine.

An ad with an unknown source: leave it marked as unexplained

An alias recorded for just one store receives an ad you can’t identify. The service record confirms which alias it was linked to, but you haven’t found any other use for that address. You can note, “This alias received an unfamiliar promotion; the reason is still unclear,” and ask the store. Don’t rewrite that as “The store was proven to have sold my email.”

Separate what you observed from what you infer, and keep a record you can revisit

Useful notes don’t need to be stuffed with copies of entire emails. Start with the date, alias, signup purpose, sender domain, and where the archived message or original is stored. If you need to review sensitive details, go back to the protected original.

The From domain is also just information stated in the email; it doesn’t verify who operates the sender. Authentication results can help assess the sender domain’s identity, but even a successful check can’t tell you where they got your address. If several messages have identical content, you can record the number and date range without sharing the full emails publicly.

Why can’t one ad prove there was a leak?

There’s usually no single field that can answer “Which website leaked my email?” Using a separate alias for each store makes it easier to investigate; it doesn’t rule out every other explanation.

• Reused alias: you may have used the same address for customer support, a review, a public post, or another promotion without noting it.
• Guessed address: An easy-to-guess prefix may be tried in bulk. Receiving an email doesn’t necessarily mean someone passed on a list.
• Related services: Loyalty programs, payments, sweepstakes, and after-sales services may involve different organizations; check what happened when you signed up.
• Forged fields: Visible recipients, sender names, and some email headers can be fabricated, so don’t take them all at face value.

Seeing the same thing more than once can help focus your investigation, but repetition alone doesn’t prove cause. When making a complaint, describe facts you can substantiate and keep the response and investigation results. That’s more useful than making absolute claims.

Contact the store with only enough information to identify the issue

Find customer support through the store’s official website, opened independently. In your first inquiry, you can provide the signup alias, the date you first received the unusual email, the sender domain, and a screenshot with the subject obscured. Ask whether the address is used for a related loyalty service and how to turn off marketing emails or submit a data request.

Share an order number, delivery address, phone number, or payment details only if genuinely necessary and through a trusted channel. Original email headers may also contain your real email address, server addresses, or tracking identifiers. Don’t paste the full headers publicly without checking them first.Never share login verification codes, a full mailbox token, authenticator keys, or QR codes.

If you need help checking how Tempowl forwarded a message, contact support@tempowl.com with an approximate time, the alias involved, and your specific question. Help checking a forwarding record doesn’t mean we can determine how a store used your data.

Pause an alias only after checking that you no longer need its emails

Save any records you need before deciding what to do with incoming mail. While an alias is paused, new messages are discarded instead of forwarded to your real inbox, and they can’t be retrieved after you resume it. Don’t cut off a route for refunds, returns, or account recovery just to block one ad.

• Check for open orders, deliveries, returns, refunds, or customer service updates.
• Check whether the store still uses this alias for login codes, password resets, or security alerts.
• If you want to change the address, verify the new one in your store account before considering whether to pause the old alias.
• Keep signup records and any necessary originals. Pausing or deleting an alias won’t recall emails already delivered to your real inbox.

For a step-by-step check of how long to keep receiving messages, see Email timeline: from your first order to a refund. If you only need to receive one email in the short term, you can use a temporary inbox. But an address that expires by default after 3 hours and can’t be recovered isn’t suitable for long-term shopping account recovery.

Find the address first, check how you used it, then decide whether to pause it. An alias gives you control over where messages go and clearer clues about their source—not a forensic verdict based on one email.