@mupan I do something similar. I use a forwarding acct. Some forwarding accounts us on-the-fly address generation, and some use manually generated ones. On-the-fly addresses are the most convenient, but they always show a username either to the left or right of the "@". Spam control is decent, but the username exposure means anyone with access to my credit file can reach me by email.
@mupan Hence my question. I think they only share with banks information that is used for verification, which I believe is just shipping address.
@mupan And when they do, they could change the keyword so that I wouldn't know if it was the credit bureau who leaked it. I like knowing who leaks my address. So I supply banks with a manually generated address. It's more work but I know they will share it. But I prefer not to do that for every shop, so I use on-the-fly addresses for shops, hoping that they won't share with the banks.