Difference between revisions of "Scammers and Spammers"

From FreecycleFAQ
Jump to: navigation, search
[checked revision][checked revision]
m
(Changes requested by Caroline)
 
(13 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
The Spam Control Team deals with members who violate Freecycle’s Terms of Service in ways that cannot be managed by local moderators.
  
−
Spam is the Internet equivalent of junk mail ‐ email you didn't ask for, and probably don't want. It's sent by spammers, usually using automated tools. Freecycle members will often have their own spam filters to detect and remove ‐ that's up to them. This answer just talks about what you can do as a moderator to reduce the chance of your Freecycle group being used for spam.
+
'''Spammers''' massively post or respond to posts with content that is unrelated to Freecycle. Spammers usually operate across geographies, rather than in one locale. Spammers attack Freecycle groups in the following ways:
 +
*Posting spam to the group
 +
*Spoofing another member
 +
*Harvesting member addresses
 +
*Posting seemingly innocuous messages that require going to a third-party website<br>
  
−
Spammers attack Freecycle groups in the following ways:
+
'''Scammers''' seek to use Freecycle’s website to defraud members, usually by asking payment upfront for delivery/courier fees or postage for items they have no intention to deliver.
  
−
#Try to send spam to the group.
+
Here are some examples of the type of posts that are most often associated with scammers:
−
#Harvest member addresses and use them to send spam. <br>
+
*Unusual use of punctuation and spacing in the subject line. (example: i p a d s.'-. or ..PSP' ')
 +
*An Offer with several of the same item for collection
 +
*Small personal gaming/computer devices and electronics, like PS4s, PSPs, tablets, laptops
 +
*High-value items offered to multiple groups ([[How_To_Use_Mod_Tools#PostSearch|click here to see how to search posts on other groups)]]
 +
*Puppies (usually well-known breeds)
 +
*An Offer for something that is probably too good to be true, especially from a new member
  
−
For 1), there are two possible ways they do this:  
+
'''What to do if you find a suspicious post:'''
 +
#Please '''do not delete''' the post. Put the post into moderation by editing the post and unclicking Approve.
 +
#Please leave the wording of the subject line and post description intact. If you like, you may add a parenthetical message that says "Reported to Spam Control"
 +
#Temporarily put the member on moderation
 +
#'''Report the post to Spamcontrol@freecycle.org'''. Include the following information in your email:
 +
::* your name/email address
 +
::* group name
 +
::* username and email address (if known) of the member who made the post.
 +
::*  post ID number
 +
::* a copy of any correspondence between you and the other member
 +
::*screenshots (optional) 
  
−
*1a) Join the group and send spam
+
If you receive reports from members for posts that you have NOT yet reported, please:
−
*1b) Impersonate ("spoof") an existing member, and send spam which appears to come from them.
+
#Ask the member to '''forward the entire email exchange''' between them and the suspected scammer to you and include it in your report to spamcontrol@freecycle.org. Email headers would also be very helpful if your member can provide them.
 +
#Let the reporting members know that Spam Control will investigate and may contact them for additional information.
  
−
There's basically nothing you can do about 1b) ‐ it's quite easy to forge email and make it appear to come from a valid user (it doesn't require their Yahoo password). So if you see an existing user send spam, don't assume that they've turned evil and overreact ‐ it may be that someone is impersonating them. Place the user on moderation for while, to allow you to catch any other such messages, and contact them gently to check.  
+
'''Important: Please avoid stating, accusing, or implying that the reported person is a scammer.''' Use phrases such as "this is a suspected violation of our Terms of Service” or "this post may be in violation of our Terms of Service." Also '''please do not engage with the suspicious member or try to conduct your own investigation.''' The Spam Control team has the necessary tools for investigating suspicious members and the sooner you report them to the team the sooner they will be dealt with.  
  
−
You can combat 1a) in the following ways:
+
Once you have made your report, you do not need to do anything further. If Spam Control determines that a post violates the Terms of Service, they will take appropriate action with regard to the suspicious account. They will also send a warning notification to any members who may have contacted the poster.
  
−
*A. Moderate new members until they have posted a valid OFFER. Many spammers join a group and immediately send a message ‐ if you moderate new members then the spam will show up in your Pending queue. Don't reply to it, just delete it ‐ replying to spam just tells the spammer that they've reached a human, which is what they're trying to do. Most spammers aren't clued‐up enough to send a valid OFFER to get off moderation before sending their spam.
+
For privacy reasons, Spam Control team members will not discuss the outcome of their investigations, except to let you know if a post is NOT spam or a scam and can be placed back into active status.
−
*B. Approve new members. This means more work for you, but again, spammers generally aren't astute enough to provide a valid reason for joining.
 
−
*C. Keep an eye on your ModSquad ‐ report spammers to it, and actively remove reported spammers from your list. This is quite labour intensive, and is of limited use when spammers make up a new Yahoo name for each attack, but it can help with some persistent offenders who target multiple groups.
 
  
−
<br> Now for 2). The way this works is that a spammer joins the group, and then extracts email addresses from the message archive, or from mails that get sent to the group. They can then send spam directly to those addresses, without passing through your group. This requires quite a persistent spammer, so it's rare, but because it doesn't go via the group there's little you can do about it. The B and C approaches above can help identify culprits who might be doing this.
+
[[Moderator_Manual:Courier_scams|Click here for a sample notice you can use to warn your members about such scams.]]

Latest revision as of 12:11, 21 October 2019

The Spam Control Team deals with members who violate Freecycle’s Terms of Service in ways that cannot be managed by local moderators.

Spammers massively post or respond to posts with content that is unrelated to Freecycle. Spammers usually operate across geographies, rather than in one locale. Spammers attack Freecycle groups in the following ways:

  • Posting spam to the group
  • Spoofing another member
  • Harvesting member addresses
  • Posting seemingly innocuous messages that require going to a third-party website

Scammers seek to use Freecycle’s website to defraud members, usually by asking payment upfront for delivery/courier fees or postage for items they have no intention to deliver.

Here are some examples of the type of posts that are most often associated with scammers:

  • Unusual use of punctuation and spacing in the subject line. (example: i p a d s.'-. or ..PSP' ')
  • An Offer with several of the same item for collection
  • Small personal gaming/computer devices and electronics, like PS4s, PSPs, tablets, laptops
  • High-value items offered to multiple groups (click here to see how to search posts on other groups)
  • Puppies (usually well-known breeds)
  • An Offer for something that is probably too good to be true, especially from a new member

What to do if you find a suspicious post:

  1. Please do not delete the post. Put the post into moderation by editing the post and unclicking Approve.
  2. Please leave the wording of the subject line and post description intact. If you like, you may add a parenthetical message that says "Reported to Spam Control"
  3. Temporarily put the member on moderation
  4. Report the post to Spamcontrol@freecycle.org. Include the following information in your email:
  • your name/email address
  • group name
  • username and email address (if known) of the member who made the post.
  • post ID number
  • a copy of any correspondence between you and the other member
  • screenshots (optional)

If you receive reports from members for posts that you have NOT yet reported, please:

  1. Ask the member to forward the entire email exchange between them and the suspected scammer to you and include it in your report to spamcontrol@freecycle.org. Email headers would also be very helpful if your member can provide them.
  2. Let the reporting members know that Spam Control will investigate and may contact them for additional information.

Important: Please avoid stating, accusing, or implying that the reported person is a scammer. Use phrases such as "this is a suspected violation of our Terms of Service” or "this post may be in violation of our Terms of Service." Also please do not engage with the suspicious member or try to conduct your own investigation. The Spam Control team has the necessary tools for investigating suspicious members and the sooner you report them to the team the sooner they will be dealt with.

Once you have made your report, you do not need to do anything further. If Spam Control determines that a post violates the Terms of Service, they will take appropriate action with regard to the suspicious account. They will also send a warning notification to any members who may have contacted the poster.

For privacy reasons, Spam Control team members will not discuss the outcome of their investigations, except to let you know if a post is NOT spam or a scam and can be placed back into active status.

Click here for a sample notice you can use to warn your members about such scams.

Retrieved from "https://wiki.freecycle.org/index.php?title=Scammers_and_Spammers&oldid=24295"