I own a website.
The website connects between people providing a service ("servicers") and people interested in receiving that service ("servicees").
A servicee performs a search on the site and gets a list returned of possible servicers. Then the servicee can send the servicer a message through the site (the servicer's direct contact info is not provided).
I recently had a spammer contact a bunch of servicers in the way described above.
I took care of this one problematic spammer by blocking his ip and email.
I am wondering if there are any suggestions for how I might stop future spammers like this from doing the same thing. One possibility is to have all messages go though some sort of human validation. Is this a reasonable approach? (messages aren't too long and are very sparse at the moment). Are there any other approaches? Things that other companies do? (I currently have a Captcha set up when a user registers).
Also, I suspect that this one spammer might have come from my new AdWords campaign, I'm thinking of changing around the keywords to attract less attention. If anyone has any insight in this regard as well I'd be happy to hear it.