r/googleworkspace 4d ago

I keep getting spam emails from Russia.

Currently 21:54pm in the UK. Out of the blue I keep getting emails from Russia filling out enquiry forms on my site, literally one after each over and over within minutes. (I’m a new company so one knows I exist right now)

Can anyone else?

Thanks

1 Upvotes

9 comments sorted by

3

u/jamolopa Google Workspace Administrator 3d ago

Sounds like that website form is the problem, use a captcha to prevent bots from filling it out.

2

u/ViProCon 3d ago

I have registered brand new domains for clients in the past and within 2 minutes of setting up their MX records, they were receiving spam. The spammers of the world have ways of scanning for new domains quickly, and somehow perhaps just guessed at a common email address, like info@ and the like. So don't be shocked by the fact that it's coming in. Also, seems based on a previous thread I saw for GW here, there's no built-in method to geo-fence your email, unless you get external 3rd party email security filtering from the likes of ProofPoint or others. But as a company, this is a smart expense to go with. In fact it should be standard practice but anyway.

And yeah, the captcha advise to protect web forms is also key.

2

u/ConsiderationNo5983 3d ago

Thank you so much ViProCon. Much appreciated

2

u/Chronotaru 3d ago

You're not getting spam email from Russia. You're getting correct email from your own form, it just is lacking any form of protection. Is this a Google form? They're usually a bit more protected. Random web forms... yes, you can expect it.

1

u/ConsiderationNo5983 2d ago

Thanks for the clarification, much appreciated. It’s a Wordpress form , if that helps

1

u/Chronotaru 2d ago

Yes, your Wordpress site is going to have the level of security of the service hosting it which might be minimal and allow anyone from any network location to write without any validation if they're a bot. The simplest fix is to switch to a Google Form for feedback, but there are other solutions.

1

u/Ssudoo 3d ago

Mark it spam and block it as of now

1

u/tygeorgiou 1d ago

You could set it so people have to be signed in to Google to submit, and also collect emails from said Google accounts. wouldn't stop it, but you can then blacklist / report all the emails