Ghost sign up and spam?

Using Ghost
9

Hi everyone,

There has indeed been an increase in spam signups across multiple Ghost sites originating from email domains like tmomail.net and txt.bell.ca.

These domains serve as email-to-SMS/MMS gateways, converting emails into SMS or MMS messages delivered to phone numbers.

To address this, we’ve introduced a configurable blocklist for email domains in Ghost. This blocklist is already active on all Ghost (Pro) sites, and our logs show it has successfully blocked thousands of spam signups since. We’re actively monitoring the situation and will continue to fine-tune the blocklist as needed.

Self-hosters can apply the same blocklist to their Ghost sites, by adding a list of blocked email domains to their config, under spam.blocked_email_domains. For example:

"spam": {
    "blocked_email_domains": ["tmomail.net", "txt.bell.ca"]
}

We appreciate your patience as we work to mitigate this issue.

Sag
Product Engineer @ Ghost

12 Likes