As a common-name@gmail.com holder, unfiltered spam is less commonplace than a) websites adding me to distribution/mailing lists without verifying I was the person to type it in, b) people who either accidentally transform their address into mine, or forget part of their address.

These are from all parts of the globe. I have access to bank accounts in South America, Disney employee music royalty earnings tax disclosures and forms, European subscribers online platforms, AWS account recovery options, veterinarian records in Studio City, private school/PTA leadership website access in Mountain View.

I stopped trying to return unopened mail, nobody cared.

I don't do anything with any of this because I'm not a giant fool, but people, have your users verify their email addresses before you trust them.