On: The dots do matter: how to scam a Gmail user

[jwilk]

I'm (naively?) hoping that Google doesn't know which aliases received at least one email.

[chatmasta → jwilk]

Of course they know. They delivered the emails to the aliases, which are permanently in the To: field of the metadata. As long as you can see the email “to” address in the gmail web interface, so can Google.

[jwilk → chatmasta]

What about emails that were deleted?

[batuhanw → jwilk]

Do you mean emails marked as deleted with timestamp?

[samb1729 → jwilk]

They weren't deleted