I could prob gin up script to scrape all TX of known memo profiles & look for receipt from addr not from other memo addr. Then look at which are "suspicious". Might try if bored later.