I use Sneakemail quite a bit. It's a service that allows you to set up multiple double-blind addresses (that is, when someone sends you an email through them, it sets up a return address that will keep your real email address hidden should you email them back) and I use it often when signing up for sites on the basis that if they end up selling my address or spamming it too much I can switch it off without losing my real address.

I signed up for AllOfMP3 with one.

Which meant as soon as spam came through I knew where the address had been used and thus who to talk to. I dropped AllOfMP3 a note through their assistance system explaining the problem and how I knew it was the address I'd signed up to them with - and only them.

Their reply, a couple of days later, was to the effect that the spammer had targeted my address because it had allofmp3 in it (which it didn't) and the spammer was trying to lower AllOfMP3's reputation. And they hadn't been hacked or sold my address (the latter of which I hadn't accused them of - but perhaps it was an English-Russian translation problem). I replied with another query further explaining this wasn't the case and, if they were sure it wasn't them who'd let the email into the wild, they might want to check with their credit card partner - which was given the address during the transaction where I filled up my balance on AllOfMP3.

So far, four days later, there's been no response. If this goes on much further, they're going to end up “Dead To Me”.