Email Harvesting

Definition - What does Email Harvesting mean?

Email harvesting is the process of obtaining a large number of email addresses through various methods. The purpose of harvesting email addresses is for use in bulk emailing or for spamming.

The most common method of email harvesting is by using specialized harvesting software known as harvesting bots, or harvesters.

[Free eBook] Cybersecurity: The Beginner's Guide ($29.99 Value) FREE For a Limited Time | Download Now

Techopedia explains Email Harvesting

Spammers harvests email addresses through various techniques, including:

Posts into UseNet with email addresses
From mailing lists
From Web pages
From various paper and Web forms
Through the Ident daemon
From a Web browser
From Internet relay chat and chat rooms
From finger daemons
From domain contact points
Using the method of guessing and cleaning
From white and yellow pages
By accessing the same computer used by valid users
From the previous owner of an email address
Through social engineering
By buying lists from other spammers
By accessing the emails and address books in another user's computer
By hacking websites

The above techniques enable spammers to harvest email addresses and use them with electronic messaging systems to send unsolicited bulk messages. The following techniques can be used to prevent email harvesting:

Email address munging by changing the "@" sign into "at" and the "." into "dot"
Turning an email address into an image
Using an email contact form
Using JavaScript email obfuscation. In the source code seen by the harvesters, the email address appears to be scrambled, encoded or obfuscated.
Using email address obfuscation through HTML. For example, one can insert hidden elements within the address to make them appear out of order and use cascading style sheets to restore the correct order.
Prompting users to enter a correct CAPTCHA before divulging the email address
Using a CAN-SPAM notice enabling prosecution of spammers under the CAN-SPAM Act of 2003. The website administrator must post a notice that "the site or service will not give, sell, or otherwise transfer addresses maintained by such website or online service to any other party for the purposes of initiating, or enabling others to initiate, electronic mail messages."
Monitoring the mail server. This method can be implemented at the recipient email server. It rejects all email addresses as invalid from any sender specifying more than one invalid recipient address.
Using a spider trap. This is a part of a website built to combat email harvesting spiders.