I'm curious if there are any best-practices that can be followed to avoid customers being targeted by scammers in communities facilitated by Lithium. For example, one major technology company uses Lithium for their customer support forums. They allow brand-new accounts to send private messages to other customer accounts. Those PMs then arrive in the customer's email looking very much like legitimate correspondence from the company. Scammers are using this to send fraudulent phone numbers, where they pretend to be support. They then charge the customer for fake support contracts or fool them into installing malware. Their forum shows several instances of people who've fallen for it.    To get the ball rolling, I would suggest that brand new accounts (or likely any user account) shouldn't be able to send a private message. It's more dangerous than it's worth.    What other changes could be made to limit the ability of scammers to pray upon users? Is there a list somewhere? ... View more