In the live.fi example, it sounds like Microsoft may have failed to prevent a random user from registering [email protected] as a personal account. Citibank probably won't allow a customer to get that e-mail address!