Serious Security Issue with SEND ONLY EMAIL
How about security as a category?
My mother recently had her account hacked, recently as in last night. We are not sure how they got access exactly but they were extremely sneaky and appear to be taking a new approact. They created an outlook account with the same email id as her yahoo id, then added their own id to the password reset settings.
They ALSO added the outlook to the send only email settings, something I didn't even know was a thing, and here is the part you need to let your security team know about IMMEDIATELY.
They changed it so that the outlook account was send only but reply to was to the yahoo account AND they set the reply to on the yahoo account to the outlook account basically meaning they can monitor every email she made and forward it to her regular account un-noticed.
I might suggest firstly NOTIFYING THE PERSON WHEN EITHER OF THESE THINGS IS CHANGED EVERY TIME NO MATTER WHAT with a warning that this can compromise their security.
And when an email IS forwarded, add a note to it, or watch for that particular configuration.
(I am the users son who works in IT)

-
If you're having account or sign-in issues, please contact our Customer Care team at help.yahoo.com. They are separate from the Yahoo Mail team. They resolve these types of issues and have the tools to help. Hope this helps. Thanks!