When I attempted to log into Facebook this morning, I received the message, "Incorrect email/password combination." I use a password management program that automatically fills the login form, and hadn't changed the password, so something immediately smelled fishy. When I tried to reset the password, entering the email address associated with the account, I got this:
The domain of the email address I use for Facebook is "xemaps.com" ("spamex" backwards). I have used the Spamex disposable e-mail address service for years without problems on any other website. Whenever I create a new account somewhere I generate a new disposable e-mail address rather than giving them my actual address. The address is perfectly valid and forwards to my main address. If an address associated with somewebsite.com starts getting a bunch of spam, I know that site is selling/giving away my info or is not keeping tight control of it (assuming I only gave the address to that site, which is usually the case). I can then temporarily turn the address off, blacklist the bad senders, or delete the address completely. Basically, it gives me a bit more control over who gets into my inbox.
Does anyone know if this violates a Facebook policy? It's possible that spammers are abusing the Spamex service (which is a paid service), but if so, does it make sense to blacklist a whole domain? There are undoubtedly spammers using webmail services like hotmail and gmail as well. I'm certainly not practicing any abusive behavior and am not even a heavy Facebook user (I don't do any of the things listed in the "13 Reasons your Facebook account will be disabled" post). This lockout came with no warning, no explanation of why my email domain is considered abusive or, at the very least, a request that I change my address.
I sent a message to Facebook and will post updates here.
Loading Profile...
