Occasionally, someone uses my backup email address to sign up for an account. I presume they've mistyped it or left off a letter. The problem (for them) is that now I can get into their account. Usually, they recognize the problem and fix it. But sometimes they don't. Which means I can use password reset to take over their account. Always make sure you get a signup email from the service you registered at.