Password reset spam emails

I'm getting lots of messages about password resets being requested which are turning out to be bogus. The emails are from server@toastmastersclubs.org. The subject line is "Washtenaw Toastmasters Club Member Authentication Email for .

The email text is below. Several members report getting emails, too. It seems like spam. Can you get the false emails to stop?

Thanks
Phyllis
Washtenawtoastmasters.org
Club #3054

Hello Phyllis Ford:

This email is for your information only. You are registered as the website administrator for the Washtenaw Toastmasters Club website.

Mayna M. Schumacher, DTM has requested a member password reset for this website. This confirms that another email containing the password reset link has also been sent to them.

You are receiving this notification email so that you can follow-up with this person to verify that they were able to reset their password and access the website.

(NOTE: Any replies to this notification email will be sent to the above member.)

*** If you have any questions about this email, please contact the FreeToastHost support team at
< support.toastmastersclubs.org >

Phyllis,

The purpose of the password reset notification is so that you as the club administrator may be able to reach out to the member to assist them.

Usually, the member does not check their spam or junk folder, and does not realize that the email is there and keeps trying to reset the password.

If the emails are bogus, then someone that is not a member is trying to gain access.

A. They are not spam emails.

B. As RogerM notes, they indicate that a member or someone posing as a member has requested a password reset. They are not bogus... the approach has been proven over the last few months.

C. Given that someone could pose as a member and request password resets, I have added a checkbox in the Administrator Info tab of the Admin Console to allow the admin notifications for member resets to be shut off. Member emails for this cannot be shut off since that would prevent them from doing a password reset when they need to.

NOTE: As a general rule I do not recommend disabling the admin notification emails because my view is that part of the website admin role is to oversee and support the use of the FreeToastHost website. That means that if a member is having trouble getting logged in, they will frequently need someone more technically savvy then themselves to assist them. In other words, the website admin.