Spammer gets onto Allow list or uses known address

[--VQ--]

Question
Spam is coming in with the Control Stripe Sender ALLOWED. When I check my Allowed List, there are lots of addresses in there that got there via "Auto". I don't know how they got there. I don't recall seeing these senders respond to a challenge. How could the address automatically be added to my Allow List and how can I stop spammers who use the address of a friend?
Asked by Kirt K of Lifelinepro

Background
There are several ways that addresses get onto your Allow List:

• You import them in one of these ways (details):
  • From an address book, using the tray wizard
    
  • By pasting them into the Allow List entry box
    
  • By emailing to a special "intercept subject"
  
  
• You write to the address
  
• Sender satisfies a challenge
  
• Personal Smart Filter releases message
  
• You release a message from Held Mail

Methods 2 & 3 can be disabled on the Configure | Preference page. Methods 2 & 4 show the word "Auto", because you did not take any action.

Typically, when a user sees AUTO addresses that he does not recognize, it means that the filter released a message (or you released a desirable message) and then the spammer - or another spammer - continued to send with the address of your coorespondent.

Solution
It's easy to stop spammers from using your own address. But what if a spammer has the address of a regular correspondent? This presents a more complex problem because mail from your friends is not signed with a universally recognized method. If the friend uses Vanquish or an ISP that uses a compatible signature, then simply remove the address from your Allow List. You will still get his message because of the "digital trust signature". Additionally, Vanquish is smart and will not re-add the address to your Allow List, even as you write back. If not, then you may need to give that friend a special custom address. [details]