QQ Mail's English address validation error leads to user exploitation; forced recovery and one-month membership compensation starting June 2

The QQ Mail team recently sent official notifications to affected users, disclosing an anomaly in the verification logic of the reserved list for English email addresses. This caused some English email addresses that should have been protected by the system and not open for registration to be mistakenly released, allowing ordinary users to successfully register them. A user in the V2EX community posted confirmation of discovering and registering system-reserved addresses such as [email protected], [email protected], and [email protected], thus exposing this vulnerability. According to the official QQ Mail notification, the affected addresses will be forcibly reclaimed: the change will take effect on June 2, 2026, when the affected English email addresses will be unbound from user accounts; new emails sent to these addresses can still be viewed normally until 11:00 AM Beijing Time on June 10, after which these addresses will stop receiving new emails, though historical emails can still be accessed in the main account.

Tencent apologized in the notification, stating that it has conducted a comprehensive review and fix of the system logic, improved the verification mechanism for reserved English email addresses, and will compensate affected users with one month of QQ Mail membership, which will be automatically credited within three working days after the reclamation takes effect. This incident has once again sparked discussions among users about the standardization of English email address management. Some affected users are concerned that because these email addresses have been used to register third-party services, their ability to receive verification codes or account recovery notifications will be impacted after reclamation. They advise users to promptly notify their contacts to update their email addresses.

QQ Mail Official Notification (screenshot) | V2EX Discussion