I have a catch-all email domain, and this is exactly what I do. Walmart gets “walmart@example.com”, Target gets “target@example.com”, etc… All of them go to the same inbox, so I always know which email address they *think* I have. If I start getting spam addressed to walmart@example.com, I know Walmart sold my info. I can just filter anything addressed to that account straight into my spam folder.