---
title: Reacting to Spam
eleventyNavigation:
  key: Reacting to Spam
  parent: Outgoing E-mails
  order: 99
---

There are three main reasons for sending spam:

- [a website infection](/en/docs/web-hosting/sites/troubleshooting/clean-up-a-site),
- a form attack on website,
- a password theft.

We will present the latter two cases here.

## Form attack

When the alwaysdata team encounters spam sent due to a form attack, they will:

- stop sending by disabling `POST` requests on the website in question,
- delete all related e-mails awaiting sending,
- warn the user.

The user will have to put a more efficient protection on the form, through the use of a [CAPTCHA](https://en.wikipedia.org/wiki/CAPTCHA) for example.

The [WAF](/en/docs/web-hosting/sites/customizing/waf) can be useful to block some attacks.

## Password theft

In this case, they will:

- stop sending by changing the password for the affected e-mail address,
- delete all related e-mails awaiting sending,
- warn the user.

Then the user can provide a new, **more secure**, password to again allow access to their address.

> [!WARNING]
> In repeat cases, the alwaysdata team can always *suspend* the account until the user returns.

> [!TIP]
> Test if your e-mail address [has been breached](https://haveibeenpwned.com/).