Today I was reminded to never use email addresses to identify users. a@b.co is the same as a@B.co and on some hosts A@b.co and a+x@b.co too.