I’m sure this problem is well-understood by many people on GZ but the how and why of what’s going on is beyond me. I’m also sure it will have been discussed here as a common problem but I don’t know where/how to find it.

A friend has received an email purporting to be from me (but isn’t). It has a plausible subject line and says photos of mutual interest are attached. There’s a link to be clicked but fortunately he hasn’t fallen for that. Obviously the sender is up to no good.

Over the past year or so he has received numerous similar emails purporting to be from another mutual friend.

We would like to know how these emails arise. Has someone gained access to his contact list - or maybe mine? He’s been blocking the sender’s email address but is still getting them.

Is there any way to stop this happening? Will changing his email address achieve anything? Is this a potentially serious situation - or nothing much to worry about? Will be grateful for any comments or advice on all this.