Not sure whether this is related to this topic or not:
https://invisioncommunity.com/forums/topic/477804-email-notification-sent-repeatedly/?do=getNewComment

Both of my self hosted communities use SMTP to gmail to send emails and email verification is required for registration. The larger community has had new registrations disabled for 2 months. The smaller community has new registrations enabled. In both cases, I see outgoing email verification emails in my gmail sent folders but I cannot find new or existing members associated with the target email addresses. I only notice this is a problem because the emails keep bouncing. The same email verification email to the same addresses is being sent and bounce 4 - 8 times a day each. There's nothing in my IPS email errors logs. The repeats are for verification for the community that has new registrations disabled, so I assume these verification requests are for email address changes? I don't know how to stop the emails from re-sending or being sent in the first place.

Any suggestions for what I can look at next? Thanks

 

No, that wouldn't be related in any way. From what you are describing, it would indeed be for email changes. So you wouldnt see the email for any new or old accounts, as its not actually been changed yet. Does it not give any indication as to the members name in your email there?

Nope:

 

Edited May 10, 2024May 10 by micahdg

That is a standard change email address email so I would assume someone is making a change.

Yes I understand that. My question is how do I figure out which account is requesting the change.

Im not sure there would be, to be honest. If they dont confirm the email, it simply wont make the change on their account

As a follow-up, I finally realized these specific emails I was complaining about are for people (spammers/bots) using the Contact Us form, which requires email verification to use. Registered users would have this action listed in their logs, whether they’re using Contact Us or initiating an email change. One of my communities only has 30 members and none of them are changing their email addresses or using the Contact Us form. I have all the same invisible recaptcha settings applied to this form as the registration form, but sadly here we are with 30+ spammers a day getting through (though not far enough to actually spam me with contact requests, so that’s good). I wish we could apply the question and answer challenge to the Contact Us form, too.

Unfortunately, the Invisible Recaptcha option is garbage nowadays. Switch to hCaptcha and update the difficulty settings to the maximum value possible. It won’t block all attempts, but more than the other options at least.

Also ensure you set the difficulty to “difficult” when you set it up