[Lasher]

A couple of hundred people got PM spam in the "send me your bank account info and we do great business together" type style, which means our first spammer made it through.

I know the extra manual step to verifying accounts before they can post frustrates some people, but it really does help keep spam down on the forum. It turns out the "users awaiting confirmation" group could still PM others.

That user group can no longer use PMs (but can still use the "contact us" link if they have problems) and all PMs from this specific user have been removed so most people will never even see the spam.

Thanks to those who reported it.