Spam Message Sent Using Maps Services

I've seen a comment or two about the Maps email tool being used inappropriately, but I wanted to create a separate topic. Recently I received an email via Maps requesting I watch and share a trailer for a movie (I won't even hint at the title here to avoid giving the spammer success). I know that others have likewise received other spam or phishing emails via the Maps functionality.

Is anyone aware of what safeguards are in place to avoid people being able to spam leaders (en masse) via the Maps? It could be identical emails sent anonymously one-at-a-time, some people may go that route. I'm also wondering if there's a way for bad actors to anonymously leverage the Maps to send bulk messages to leaders, or if the interface truly restricts them from doing anything other than one-by-one. The email I received may have been individually sent, in which case maybe it's the price we pay for trying to allow all to come unto Christ.

I assume you're talking about "Ward Directory and Map".

Are you able to identify the culprit? If so, I'd have bishop call support. They should be able to block that member's access.

The email has a SENDER titled "Anonymous", whereas usually the Maps emails I get have a valid SENDER email (whether that person is logged into a church account or just provides their email, I don't know). Here's the first lines of the email in question:

MESSAGE FOR: my name
PRIMARY CONTACT AT: my unit (unit number)
SENDER: Anonymous
FROM SITE: https://maps.churchofjesuschrist.org/wards/unit number

I assume the email was sent via the "Find a Church" icon at the main website, which takes you to https://maps.churchofjesuschrist.org. From there, I expect the person selected my unit, and selected "Send a Message" under my name. There's a toggle in that message box that allows a person to indicate if they want to be contacted regarding their email. If a person selects to include their email, the Church puts up at statement about safeguarding that person's contact info. But in the email I received, there's nothing identifying the sender, and nothing indicating a way to let the Church know I feel the email is inappropriate (and it definitely was an inappropriate way to use this tool).

I'd call support. Perhaps they need to remove the option to be anonymous. They might also have some tools to ban that IP from using the tool.

I received a different spam message through the map services. Would be great to be able to block this so they don't scam a leader. Here is a part of the message.

"My name is Mrs. Susan McClary. I am 76 years old and a British citizen. I am currently hospitalized in a private hospital here in Abidjan, the capital city of Cote d'Ivoire as a result of cancer. I was diagnosed with cancer about 4 years ago. Now, it is clear that I’m approaching the last-days of my life because my doctor told me that I would not last for the next 3 Months.

I have some funds inherited from my late husband, the sum of US$ 3,800,000 which he deposited with a bank in Abidjan. I am looking for an honest and God fearing person that can use these funds for charity work and 15% out of the total funds will be for your compensation for doing this work. Please let me know if you are able to do this work so that I will give you more detail on how it could be done."

Anyone aware of a way to block this person?

It's possible they didn't use the maps service at all, but copied and pasted the data to make it look like they did. What does the header data look like?

However, it stands to reason that the maps service could be used in this way, and the ability for this to happen might be a concern.

If we used a centralized messaging service, that would solve the problem (and many others). As it is, I think your only option is to mark it as spam, warn your ward/stake members, and move on. Probably the main concern with a centralized service is that people might be concerned that people wouldn't use it. I don't personally think that's very true (less involved people might check the site less often). If they're using the directory, they would effectively be using the hypothetical centralized messaging service, too (and see any notifications that exist). Plus, you could have it send notifications to email to remind people if they have messages, if you really wanted to (and that would still solve the problem posed, since you would know who sent the message).

There's a vague possibility you might be able to catch the culprit, but I wouldn't count on it (let alone count on a reliable way of doing so).

You could try to compare IP addresses with known ones, but IP addresses change and are reshuffled (because static IPA addresses pretty much don't exist anymore); so, you might end up blaming the wrong person (or even if you do get it right, there might be multiple people who use that computer). Plus, they probably used a VPN anyway, and you'd have to be pretty obsessive to do that (to go through and compare the IP addresses [where they didn't use a VPN]).

Okay. So I was a bit confused. I thought they were getting this from the ward directory maps service (which apparently wasn't the case). It's about the meetinghouse locator. So, are you saying people can send local leaders messages when they're not signed in? How are they being anonymous? It sounds like this messaging service is intended for people who are not members of The Church of Jesus Christ of Latter-day Saints, too. Is that correct? If that's the case, they could just make another account if you blocked them (or if they don't have to make an account, I don't know how you would block them).

So, it's possibly just a spambot that emailed you, rather than an actual person. Yes, actual people could in theory make, run, and own spambots, but a spambot might be owned by a larger organization, rather than a single individual. I would consider an organization owning it considerably more likely, considering the costs and technical learning curve involved.

munaish wrote: Sun Feb 11, 2024 2:08 pm It's about the meetinghouse locator. So, are you saying people can send local leaders messages when they're not signed in?

Yes. The idea is probably to allow it to work for non-members as well.

Marking it as spam is not a good idea as it's likely to block future emails from the church.

So, are you saying people can send local leaders messages when they're not signed in?

A bit more involved than even that. I just did a couple of tests, sending an email to my local unit via the "Send a Message" functionality in the meetinghouse locator. I was signed into my church account at the time. When you click "Send a Message", the message box that opens has a toggle whether you are willing to be contacted.

If I do not select that toggle, then even if I am logged into my church account, no identifying information is send with the email - it is received as coming from "Anonymous".

And even if I am logged onto my church account and select that toggle, I can provide whatever name, email, and phone number I want -- it can be complete garbage unrelated to anything in my church account. The email is received with the SENDER identified as the name and email I provided, and the PHONE is whatever I entered.

All to say, the current implementation seems intentionally designed to allow leaders to be contacted in this fashion, and for those sending the message to be able to fully determine whatever type of contact information they wish to provide.

I recived the same message:

Dear Bishop ...,
Thank you for your quick response to my email.
I know that my message may come to you as a surprise. Nevertheless, I humbly ask you to give me your attention and hear me. I am writing this message to you with heavy sorrow in my heart; I have chosen to reach you through the internet because it still remains the best medium of communication for me.
My name is Mrs. Sarah Carlyle. I am 76 years old and a British citizen. I am currently hospitalized in a private hospital here in Abidjan, the capital city of Cote d'Ivoire as a result of cancer. I was diagnosed with cancer about 4 years ago. Now, it is clear that I’m approaching the last-days of my life because my doctor told me that I would not last for the next 3 Months.
I have some funds inherited from my late husband, the sum of US$ 3,800,000 which he deposited with a bank in Abidjan. I am looking for an honest and God fearing person that can use these funds for charity work and I am willing to give you 15% out of the total funds as your compensation for doing this work.
Please let me know if you are able to do this work so that I will give you more detail on how it could be done.
I will appreciate your utmost confidentiality and trust in this matter to accomplish my heart's desire as I don't want anything that will jeopardize my last wish.
In Christ,
Mrs. Sarah Carlyle.

I just recieved the same mail, thank you for sharing your concerns, I realized now this is a SPAM.
Best regards.

For those of you getting this spam message, please report it to the Global Services Department (GSD) so they can pass the information on for review.

I just received the same message. Sounds like they are fishing with other wards now too.

Update regarding what I see on May 1 2024:

The anonymous option appears to have been removed from the send a message tool. I believe that the same UI is presented whether you are logged into your church account or not. An alert dialog appears stating that "This feature is only for personal, non-commercial use." And you are required to enter your name, and either an email or phone number. Of course the email can be random or completely invalid, as well as the phone number.

I'm much happier with this interface, I was never quite sure about the purpose behind this tool allowing for anonymous contact to be made to a Bishop. In the case of something being so truly severe that somebody wanted to report it to a Bishop but remain anonymous, this tool seemed a weird way to provide that option.

Re: TLoken's post above:
I just received the following message from the same source you described in your post. I am not sure who to contact at the Church's IT Department to report this, but if I am getting this probably hundreds of bishops are receiving it as well. I imagine if I were to reply to this person I would get the same message TLoken posted.

MESSAGE FOR: Bishop [my surname]
SENDER: Susan McClary <susanmcclary18@gmail.com>
FROM SITE: https://maps.churchofjesuschrist.org/wards/
--------------------------------------------------

Dear Bishop [my surname]

Please notify me if this email address is valid to reach you ?

In Christ,
Mrs. Susan McClary.

--------------------------------------------------
To help protect your privacy, people can use the "Send a Message" feature, where available, to get in touch with you without revealing your contact information. However, if you choose to reply, your contact information will be revealed. You will be unable to respond to "Anonymous" senders.

mendenhall wrote: Fri May 03, 2024 9:13 am I am not sure who to contact at the Church's IT Department to report this...

Post # 13 (several posts before yours) indicates we should report these to the Global Services Department. Your ward clerk can give you their number. They may have a email address for you to forward it to after you speak with them.

Me llego este correo>

Estimado obispo

Gracias por su amable respuesta a mi correo electrónico y lamento mucho responderle ahora. Estaba enfermo. Ruego a Dios que les dé la gracia de cumplir esta misión para la gloria de Su nombre.

Lamento mi respuesta tardía. Estoy esperando a la enfermera del hospital, Carolyne Nkamah, que me ayuda a escribir los correos electrónicos. Ella acaba de reanudar su trabajo esta tarde y es ella quien le escribe este correo electrónico.

Diré que conocerte es una motivación de Dios porque oré y ayuné para que Dios me muestre una persona sincera y honesta que pueda ayudarme a manejar este asunto. Estoy enfermo y no puedo moverme libremente porque la enfermedad me ha paralizado. Puedo ver que Dios me ha mostrado una mano capaz a través de usted y por favor no traicione esa confianza.

Soy una mujer de 76 años; De hecho, mi madre es de Rusia, mientras que mi marido y yo somos del Reino Unido. Mi esposo trabajó en la Embajada del Reino Unido aquí en Abidjan, Costa de Marfil. Durante su período de jubilación, se convirtió en comprador exportando cacao y café de Costa de Marfil a los países occidentales antes de morir en el año 2017. No sé si lo sabe, pero Costa de Marfil produce el mejor café del resto de países productores.

Los fondos de mi marido, mi herencia se obtienen de su negocio de exportación de café y cacao. Los fondos están en una cuenta reservada en suspenso aquí y el propósito del depósito es para su posterior transferencia al extranjero, y es por eso que decidí donar los fondos fuera del país para obras de caridad.

Antes de la muerte de mi esposo, él me ordenó que donara los fondos para ayudar a iglesias, escuelas y orfanatos, ayudando a los pobres y a los menos privilegiados, ya que no teníamos ningún hijo que heredara los fondos.

Mi deseo es su ayuda para cumplir nuestro voto a Dios ya que no estoy en buenas condiciones de salud para realizar esta tarea por mí mismo porque he estado sufriendo de cáncer (AML), leucemia mieloide aguda, un cáncer muy malo que es muy grave para mi cuerpo ahora, lo que ha hecho mi vida tan miserable y sin valor.

Lo peor es mi paralelismo con los accidentes cerebrovasculares, por lo que no puedo volver a hablar ni caminar bien. Por lo tanto, creo que Dios te usaría para cumplir nuestro deseo.

Según las pruebas que se realizaron en mi cuerpo para comprobar signos generales de salud y de enfermedad, mi médico confirmó que la única posibilidad que tengo de volver a vivir es mediante una cirugía, y pronto seré operada.

Por favor oren por esto porque el diablo trabaja con el dinero y la Biblia dice 'el amor al dinero es raíz de todos los males' 1 Tim 6:10. Y tampoco se puede servir a Dios y a Mammon 'Lucas 16:13.
Necesitará la mano fiel y la guía de Dios para utilizar este fondo, así que ore para mantener sus ojos fijos en Él. Mi deseo de todo corazón es permanecer en la voluntad de Dios y la Biblia dice que algunas personas ávidas de dinero se han extraviado de la fe y se han traspasado de muchos dolores.

Quiero que me proporciones tus datos como:
Tu nombre completo:
La dirección de su casa u oficina:
Su número de teléfono:

Entonces tendré a mi abogado aquí para preparar una declaración jurada de juramento de beneficiario en mi nombre para actuar como beneficiario en su nombre como nuevo beneficiario del fondo del depósito para permitir que el banco aquí realice la transferencia en su nombre.

alberth85 wrote: Fri May 10, 2024 4:19 pm Me llego este correo>

You should report that you received this message to the Global Services Center.

jdlessley wrote: Wed Mar 06, 2024 3:18 pm For those of you getting this spam message, please report it to the Global Services Department (GSD) so they can pass the information on for review.

Seeking help: how do we report this to the Global Service Department?
My first quick search pulled up numerous phone contacts outside of the US.

cclinton wrote: Tue May 28, 2024 3:39 pm

jdlessley wrote: Wed Mar 06, 2024 3:18 pm For those of you getting this spam message, please report it to the Global Services Department (GSD) so they can pass the information on for review.

Seeking help: how do we report this to the Global Service Department?
My first quick search pulled up numerous phone contacts outside of the US.

Go to LCR > Help > Contact Us. The telephone number is in the Contact Information section.

Thank you, JD Lessley.

I received the same email this morning.

I received this message last night.
I am living in Germany.


MESSAGE FOR: Branch President Bonnke
PRIMARY CONTACT AT: Bremerhaven Branch (63096)
SENDER: Susan McClary <mailto:susanmcclary27@gmail.com>
FROM SITE: https://maps.churchofjesuschrist.org/wards/63096
--------------------------------------------------

Dear President Bonnke

Please notify me if this email address is valid to reach you ?

In Christ,
Mrs. Susan McClary.

--------------------------------------------------
To help protect your privacy, people can use the "Send a Message" feature, where available, to get in touch with you without revealing your contact information. However, if you choose to reply, your contact information will be revealed. You will be unable to respond to "Anonymous" senders.

timbonnke wrote: Mon Jul 01, 2024 8:54 pm I received this message last night.
I am living in Germany.
.....

Hopefully you also reported this via the process shared in the following post:
https://tech.churchofjesuschrist.org/f ... 87#p250187