This is when you email the company's head of marketing and/or security expressing naive concern about hacking/phishing. "I received an email that looked like it's from your company, but I know it's not real because I didn't sign up for any of your lists."