This is harder to stop that you would think. I contacted Amazon to ask them to call their client and ask her to update her email address to the correct one. They said they'd done it but I kept getting them. So I contacted them again and they said they couldn't do anything at their end. Guess what their suggestion was? To email her and ask her to change her account. Um, where do they think the email is going to go?
I've set up a filter in Gmail now to delete all emails from them to her, but I can't help thinking how dangerous this is, security-wise. I could quite easily have clicked "forgot password" so that they emailed me the reset information, and from there I could have taken over her account. Amazon seem completely unconcerned about this.
Has anyone else had a similar issue? How did you solve it?