A: Partly, but not in the exact way that claim is usually framed. Responding at all—even to say “I know this is a scam”—confirms your email is active and monitored. That is the main risk, not a guaranteed follow-up from a brand-new fake identity created just for you.

Scammers send bulk messages and treat any reply as a useful signal. They often share or sell lists of addresses that respond. After a reply you can see more volume from the same operation or related ones, sometimes using different sender names, display names, or storylines. That looks like a “different profile,” but it is usually just another disposable account from the same toolkit they already use.

What typically happens when you call them out

• Many ignore the reply and stay on script, or they simply stop because you are no longer an easy target. Time spent arguing with someone who already knows is time they could spend on someone else.
• Some get abusive and then disappear.
• A smaller number keep trying with a new angle or a different address they already have ready. They routinely rotate accounts anyway; calling them out is not what invents the extra accounts.

There is no reliable evidence that telling them off causes a dedicated new persona aimed only at you. The extra attempts come from the fact that your address is now marked “live.”Why the advice is still “do not reply”Replying can:

• Put you on higher-priority lists.
• Give them extra details from your email headers or signature.
• Increase the chance you later click something or get pulled into a different scam (romance, investment, tech-support, etc.).

The safest action is to mark the message as spam/phishing, block the sender, and report it through your email provider or official channels. Do not engage. If you want to waste their time, use a dedicated throwaway account and never from your real one.

AuthorsAgainstScammers.org is dedicated to helping writers stay safe, informed, and empowered in an industry increasingly targeted by fraud. We track emerging scam patterns, publish real case studies, and provide practical tools to help authors protect their work, their money, and their peace of mind. Visit AuthorsAgainstScammers.org for more safety tips, weekly case files, and in‑depth guides on recognizing and avoiding publishing‑related scams.

Short answer: Because a real publishing consultant uses a company domain. When you see Gmail, Outlook, or AOL, it’s usually a sign you’re dealing with a freelancer, a hobbyist, or—far too often—someone hiding their identity.

Why so many “publishing consultants” use free email accounts

 They don’t have a real business. A legitimate consultant invests in a domain, hosting, and branded email. Scammers don’t. Free accounts let them spin up dozens of identities in minutes.

• They’re trying to look “casual” and non‑corporate. Many scam pitches rely on appearing friendly, approachable, and “just a fellow book lover reaching out.” Gmail helps them blend in.
• Disposable identities are part of the playbook. When an identity gets reported or blocked, they simply create another Gmail/Outlook/AOL address and continue the same operation under a new name.
• They want to avoid accountability. Free email accounts make it harder to trace who they are, where they operate, or what country they’re actually in.
• They’re impersonating real companies. A common tactic: claim to represent a publisher, agent, or media outlet—while emailing from a personal account. No reputable publishing professional does this.
• It’s cheap, fast, and unregulated. Free email services don’t verify whether someone is using a fake name, a stolen identity, or a fabricated business.

The rule of thumb for authors

If someone claims to be a publishing consultant, agent, editor, or media producer but uses Gmail, Outlook, AOL, Yahoo, or ProtonMail, treat it as a red flag. Not proof of a scam—but a strong indicator you should verify everything before engaging.

✅ What to check before clicking any link in an email

• Were you expecting this email? Unexpected messages — especially ones asking you to act quickly — are a major red flag. Scammers rely on urgency to push people into clicking without thinking.
• Check the real sender address (not just the display name). The name can say “Microsoft,” “Your Bank,” or even someone you know, but the actual email address may be completely different. Look for odd spelling, extra characters, or mismatched domains.
• Preview the real link destination. Hover over the link on desktop or long‑press on mobile to see where it actually leads. The text on a button (“Verify,” “Continue,” “Pay Now”) is not the real URL. If the previewed domain doesn’t match the legitimate company, stop.
• Read the domain carefully. The true domain is the last word before the first slash. Attackers use look‑alike tricks like swapped letters, extra words, or fake subdomains (e.g., microsoft.com.account‑verify.ru).
• Don’t trust the padlock alone. HTTPS only means the connection is encrypted — not that the site is legitimate. Roughly 80% of phishing sites now use HTTPS.
• Be cautious with shortened links. Services like bit.ly or t.co hide the real destination. If you didn’t request it, treat it as suspicious.
• Ask whether the action belongs in an email. Legitimate companies rarely ask you to enter passwords, approve payments, or update banking details through an email link. If the request feels unusual, verify through the official website or app instead.
• When in doubt, verify independently. Open a new browser tab and go directly to the company’s official site. If the email is real, you’ll see the same alert or request inside your account.

One‑sentence rule of thumb

Unexpected + Urgent + Asking for sensitive action = Don’t click. Verify independently.