dealing with phishing emails and how to add captcha to any forms we have on FTH

Our District 9 director was phished. seems the email went out to members of the district..
She is asking me to look into how to avoid future phishing problems

She said other districts (7 that she knew of) had had the same problem.. And leaders she talked with suggested we update our website to 'hide' any emails.. and to add captcha to any forms..
I'm not sure how to actually "HIDE' an email.. nor have I ever added captcha to anything.. so I need some guidance as to go ahead from here to do what my District director wants me to do.
Thanks
Admin - District 9 website
tmd9.org
Darlene Marquardt

1) what email address was the email sent to?
2) any external emails that are forwarded have a link to block the sender, did they click the link and declare the sender as spam?
3) If you have posted the DD email on any web page that is public then you have made to email public to all spammers.
4) What forms are you referring to?

PLEASE BE SPECIFIC when reporting issues we cannot work with generalities.

1. The email was sent TO the members of district 9. I got one (which I immediately deleted because I recognized it as phishing. My husband got one and as far as I know, so did the other members of the district..
2. Should we be advising our members to mark emails like that as SPAM? I didn't think to do that, I just deleted mine.
3. That's what I was asking HOW to do.. if we post things and the DD needs folks to email her (or any other leader whose email we need to post).. HOW do we post the email so it is hidden and spammers CAN'T find it or see it but the folks who need to respond to the email CAN .???? That is what I am asking.. sorry I didn't make that clear.
4. I was unsure what forms I was referring to also.. I think the only forms we have are on the 'contact us' page or on any google forms we might possible have for signing up for events or surveys or what have you and technically those would be coming from google, not FTH, even though they are accessed on FTH.
I mentioned it because that was the suggestion for us to add the captcha..
Are we the only district that has come to support about this issue?
I apologize if you thought I was being too vague.. I was describing the problem as I understood it.
Thank you

1) Again specifics please what email address was it sent to and from. The full internet email header would be best.

2) DUH !

3) If you post it in public then they have to live with spam, it is part of being on the net.

4) You will need to be specific, again was it a contact form or contact email sent to the contact email address. the email header would help here.

1. header
from: Debra Kroon <director@adminalss.net>
to: "toastmasterdarlenesue@gmail.com"
date: Nov 13, 2020, 3:45 AM
subject: Toastmasters Club District #9
security: Standard encryption (TLS) Learn more
: Important according to Google magic

Hello Darlene
Are you available to assist? I am quite unavailable now and I've got credence in you to take care of this. I would have called your phone but I presently do not have access to my mobile phone.
Toastmasters Club District #9 needs some gift cards for donation to Veterans at Hospice and Palliative care units for preventive items from Corona Disease (COVID-19). I am liable for reimbursement. Need more info?

Debra Kroon, DTM
District Director #9
Toastmasters Club
www.tmd9.org

THIS WASN'T JUST SENT TO ME.. THIS IS THE HEADER AND BODY OF THE EMAIL THAT I GOT.. IT CAME FROM THE SAME EMAIL TO ALL THE MEMBERS OF THE DISTRICT.
2. and 3. no longer relevant to this request
4. we didn't have a problem with forms.. that was just what some other district leaders told Debra (our DD).. I was inquiring how to prevent any problems with ANY forms. in the future. not a SPECIFIC form...

That is not the full email header. for gmail to see the full email header look at this
www.lifewire.com/how-to-see-full-email-headers-in-gmail-1171960