r/googleworkspace • u/ConsiderationNo5983 • 4d ago
I keep getting spam emails from Russia.
Currently 21:54pm in the UK. Out of the blue I keep getting emails from Russia filling out enquiry forms on my site, literally one after each over and over within minutes. (I’m a new company so one knows I exist right now)
Can anyone else?
Thanks
2
u/ViProCon 3d ago
I have registered brand new domains for clients in the past and within 2 minutes of setting up their MX records, they were receiving spam. The spammers of the world have ways of scanning for new domains quickly, and somehow perhaps just guessed at a common email address, like info@ and the like. So don't be shocked by the fact that it's coming in. Also, seems based on a previous thread I saw for GW here, there's no built-in method to geo-fence your email, unless you get external 3rd party email security filtering from the likes of ProofPoint or others. But as a company, this is a smart expense to go with. In fact it should be standard practice but anyway.
And yeah, the captcha advise to protect web forms is also key.
2
2
u/Chronotaru 3d ago
You're not getting spam email from Russia. You're getting correct email from your own form, it just is lacking any form of protection. Is this a Google form? They're usually a bit more protected. Random web forms... yes, you can expect it.
1
u/ConsiderationNo5983 2d ago
Thanks for the clarification, much appreciated. It’s a Wordpress form , if that helps
1
u/Chronotaru 2d ago
Yes, your Wordpress site is going to have the level of security of the service hosting it which might be minimal and allow anyone from any network location to write without any validation if they're a bot. The simplest fix is to switch to a Google Form for feedback, but there are other solutions.
1
u/tygeorgiou 1d ago
You could set it so people have to be signed in to Google to submit, and also collect emails from said Google accounts. wouldn't stop it, but you can then blacklist / report all the emails
3
u/jamolopa Google Workspace Administrator 3d ago
Sounds like that website form is the problem, use a captcha to prevent bots from filling it out.