Theme: iWiki Log in Register

Diff: Spam

Comparing revision #1 (2023-06-10 00:22:59) with revision #2 (2026-06-22 07:34:31).

Old	New
	'''Spam''' is unsolicited bulk electronic communication. It is most often associated with unwanted email, but the term can also cover unwanted text messages, direct messages, comments, forum posts, calls, and automated submissions.

Spam refers to unsolicited and unwanted electronic messages, typically sent in bulk to a large number of recipients. These messages are often sent indiscriminately and can take various forms, including emails, text messages, social media posts, forum comments, and more. Spam is primarily used for commercial purposes, but it can also be malicious in nature, aiming to deceive or defraud recipients.
	Spam can be commercial, political, malicious, fraudulent, or simply disruptive. It is not the same as phishing, although phishing messages are often delivered as spam.

== Overview ==
Spam is a prevalent issue in the digital age, affecting individuals, businesses, and organizations worldwide. It can cause inconvenience, waste valuable time and resources, and pose security risks. Spam messages are typically sent by spammers who employ automated software or bots to distribute their messages to as many recipients as possible.
	== Email Spam ==
	Email spam is unwanted email sent at scale. It may advertise products, promote websites, push dubious services, distribute malware, or lead users to phishing pages.

== Types of Spam ==
	Modern spam campaigns often use compromised accounts, botnets, spoofed senders, disposable domains, link shorteners, and copied branding. Some spam is sent by criminal groups, while some is sent by legitimate businesses that ignore or misunderstand marketing rules.

=== 1. Email Spam ===
Email spam is one of the most common forms of spam. It involves the mass sending of unsolicited emails, often advertising products, services, or scams. Email spam can also contain malicious attachments or links that, when clicked, can lead to malware infections or phishing attempts.
	== Spam and Phishing ==
	Spam describes the delivery pattern: unsolicited messages sent in bulk. Phishing describes the deception: tricking a person into giving information, sending money, or visiting a malicious site.

=== 2. Text Message Spam ===
Text message spam, also known as SMS spam, involves the sending of unwanted and unsolicited text messages to mobile phones. These messages can advertise products, services, or fraudulent schemes, and may prompt recipients to take certain actions or provide personal information.
	A message can be both spam and phishing. For example, millions of fake parcel-delivery emails may be spam because they are bulk unsolicited messages, and phishing because they collect payment details.

=== 3. Social Media Spam ===
Social media platforms are also targeted by spammers who post unwanted advertisements, links, or promotional content in an attempt to reach a wide audience. Social media spam can clutter timelines, comment sections, and private messages, negatively impacting the user experience.
	== Malicious Spam ==
	Malicious spam may include links or attachments that install malware, steal credentials, or redirect users to cloned websites. It may also be used to test whether an address is active before further targeting.

=== 4. Forum and Blog Spam ===
Spammers may target online forums and blogs by posting irrelevant or promotional content, often accompanied by links to external websites. This type of spam aims to drive traffic to specific sites, manipulate search engine rankings, or generate revenue through advertising schemes.
	Security filters, domain authentication, reputation systems, and user reporting all help reduce spam, but none removes it completely.

=== 5. Comment Spam ===
Comment spam involves the posting of irrelevant or advertising-related comments on various online platforms, such as blogs, news articles, or social media posts. Comment spammers often use automated tools to distribute their messages widely and bypass moderation systems.
	== Unsolicited Marketing in the UK ==
	In the UK, unsolicited electronic marketing is regulated by the Privacy and Electronic Communications Regulations, enforced by the Information Commissioner's Office. The ICO explains that PECR restrict unsolicited marketing by phone, fax, email, text, or other electronic message, and that the rules are generally stricter for marketing to individuals than marketing to companies.

== Anti-Spam Measures ==
To combat spam, various anti-spam measures and technologies have been developed. These include:
	This does not mean every unwanted message is criminal fraud. Some spam is a regulatory or marketing-compliance issue. Other spam is part of a fraud or cyber crime.

=== 1. Spam Filters ===
Email providers and software applications often employ spam filters to automatically identify and separate spam messages from legitimate ones. These filters use various algorithms and techniques to analyze the content, source, and other factors to determine the likelihood of a message being spam.
	== Reporting ==
	Suspicious emails can be forwarded to report@phishing.gov.uk. Suspicious text messages can usually be forwarded to 7726. Fraud or cyber crime involving loss of money, hacking, or stolen details can be reported to Report Fraud in England, Wales, and Northern Ireland.

=== 2. CAPTCHA and Verification Systems ===
CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) and verification systems are used to prevent automated bots from submitting forms or accessing certain resources. These systems require users to complete a challenge or prove their human identity to proceed.
	Unwanted marketing calls, texts, and emails can also be reported to the ICO where appropriate.

=== 3. User Reporting and Feedback ===
Many online platforms encourage users to report spam and provide feedback on unwanted messages. This helps platform administrators identify and take action against spammers, improving the overall user experience and reducing the prevalence of spam.
	== Practical Examples ==
	=== Marketing Spam ===
	A company sends repeated marketing emails to an individual who never consented and cannot easily unsubscribe. This may raise PECR issues.

=== 4. Legal Measures ===
Legislation and regulations exist in many jurisdictions to address spam-related activities. These laws often prohibit the sending of unsolicited commercial messages and establish penalties for violators. Additionally, international cooperation efforts aim to combat cross-border spam activities.
	=== Phishing Spam ===
	A bulk email claims to be from a bank and asks recipients to log in through a fake page. That is both spam and phishing.

== Impact and Risks ==
Spam poses several risks and negative impacts, including:
	=== Forum Spam ===
	Automated accounts post links across a forum to promote scams or search-ranking manipulation. The harm is disruption as well as possible fraud.

* Loss of Productivity: Sorting through and deleting spam messages can waste valuable time and resources, both for individuals and businesses.
* Security Threats: Spam messages may contain malware or phishing attempts, aiming to compromise systems, steal personal information, or commit fraud.
* Overloaded Systems: Large-scale spam campaigns can put a strain on email servers, network infrastructure, and online platforms, impacting their performance and availability.
* Deception and Fraud: Some spam messages are designed to deceive recipients into revealing sensitive information, participating in fraudulent schemes, or purchasing fake or substandard products.
* Reputation Damage: Businesses and individuals associated with spam messages may suffer reputational harm if recipients perceive them as spammers or fraudulent entities.
	== See Also ==
	* [[Phishing]]
	* [[Scamming Techniques]]
	* [[Technical Support Scam]]
	* [[SEO (Search Engine Optimisation)]]

== Countermeasures and Best Practices ==
To minimize the impact of spam, individuals and organizations can implement the following countermeasures and best practices:
	== References ==
	* [https://www.ncsc.gov.uk/collection/phishing-scams National Cyber Security Centre: Phishing scams]
	* [https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email National Cyber Security Centre: Report a scam email]
	* [https://www.gov.uk/report-suspicious-emails-websites-phishing GOV.UK: Avoid and report internet scams and phishing]
	* [https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/electronic-and-telephone-marketing/ Information Commissioner's Office: Electronic and telephone marketing]
	* [https://ico.org.uk/make-a-complaint/nuisance-calls-and-messages/ Information Commissioner's Office: Nuisance calls and messages]

* Use Spam Filters: Enable and regularly update spam filters on email clients, messaging apps, and online platforms to automatically detect and filter out spam messages.
* Avoid Sharing Personal Information: Be cautious when providing personal information online and avoid responding to or interacting with suspicious or unsolicited messages.
* Protect Email Addresses: Avoid publishing email addresses publicly to reduce the likelihood of them being harvested by spammers.
* Educate Users: Raise awareness about the risks of spam and educate individuals about best practices for identifying and handling spam messages.
* Report Spam: Report spam messages to relevant platform administrators or service providers to aid in the identification and mitigation of spammers.
* Secure Websites and Applications: Implement security measures, such as CAPTCHA systems and user authentication, to prevent automated spamming activities.
* Stay Informed: Keep up-to-date with the latest trends and techniques used by spammers to better recognize and avoid spam messages.
	[[Category:Cyber security]]
	[[Category:Internet]]