There’s a guy on youtube that scams the scammers.
If the email address is clean as far as security breaches on the web, if you use the same email address for correspondence with family and friends (not a good idea), one of them probably had a data breach and it hasn’t shown up on the one of the lists yet.