On: ICANN's new rules for domain registrants require y...

[billpg]

I already get all sorts of emails sent to the address listed on whois. Most, if not all, are outright scams. So now one of those will actually be genuine?

But which one?

[abjorn → billpg]

The one from your domain registrar, I would imagine.

[billpg → abjorn]

I have a separate secret mailbox for them to use.

I get plenty of emails in my whois-listed mailbox that purport to be from my registrar. Guess how many are genuine.

[talideon → billpg]

Basically the same way you tell if any email you receive is genuine and not a phishing attempt.

Also, consider using your registrar's WHOIS privacy service, if they provide one: your registrar only has to ensure the details you provided are genuine, and those can be masked in WHOIS.