I keep getting these team invites from META, It looks like spam to me. I was added to one of these teams, so I went in and removed myself. Then changed my password. It all started when I created a Zapier/Asana/Evernote integration, which I also deleted,
Anyone know what’s going on here?
Thank you.
@John_Palmieri - I’m not a cybersecurity expert, but one thing about your post is very concerning – when you say you “went in and removed yourself” from the team, it’s extremely likely this is a phishing email, meaning you may have thought you were logging into Facebook, but instead, they were harvesting your password with a fake login page.
I’m skeptical it has anything to do with Zapier or Asana.
But, nonetheless, as long as you are here, let’s check a couple things.
Though I’m happy to reply if you share your findings, I’d recommend also contacting your company’s IT team and explaining to them what happened as soon as possible.
And, you may also want to log into facebook using an incognito window by going directly to facebook.com and resetting your password that way.
And in the future, anything that looks/smells like spam/scams… NEVER click the links or download any files (including NEVER clicking “show images” for the email).
Bryan,
Thanks so much for the reply. Here is some additional info.
Thanks for your help!
Hey John_Palmieri - I have the exact same situation as yours and I am getting annoyed at the inundation of emails. I have contemplated setting up an email rule for the specific inbox that is getting spammed via this Asana team invite however I wanted to check if your solution worked?
The fix worked temporarily, yet wouldn’t you know I get another invite to another Asana Team today. This time I just deleted the email.
In the end, how hard is it to just put “info” in front of any email address, and create a fake team. Dang it.
I was hoping that Asana would have some method of reporting these types of fake / spam teams so that they can put a stop to them internally however I am not aware of this type of solution. Currently I am simply deleting the emails as they come in but my concern is when less cautious staff receive these types of invites.
@Forum-team - Sounds like @John_Palmieri and @Ricky_Cartwright have been experiencing this issue a lot – w/ spammers using Asana account invites to distribute spam. Any ideas on who at Asana to send this to in order to hopefully mitigate / reduce the issue?
Since spammers can always sign up for new emails and initiate new trial accounts or free accounts, just like any person, I’m not sure anything can be done. Just wanted to make sure the team was aware.
Hi @Bryan_TeamKickstart, thanks for tagging us, and I’m really sorry to hear about this issue, everyone.
This is definitely spam, so the best thing to do is reach out to our Support team. When you submit your request, be sure to include screenshots. Support has a team dedicated to handling Privacy & Security cases.
I should mention that Support queues are a bit backed up right now, so responses might take a little longer than usual. We they are working on solutions for that in the near future.
That said, I’d still recommend contacting Support, each of you reporting your specific case. This information will be super helpful to track the spammer and take any necessary actions. Hope this helps!
I can’t find a way to report this to a real person but apparently scammers are now trying to use Asana as a spam system with fake Meta support.
First I got an email saying I was added (I did not accept). Now I constantly get spam updates from this asana project with the same “your page is in violation” bs.
Where I can report this? The URL looks legit for an Asana generated notification.
@Vanessa_N - I really appreciate your responsiveness. Just a note – there wouldn’t be a clear way to see the email address of the spammer, because the affected users say these emails are coming from no-reply@asana.com.
Sounds like this is becoming more common for quite a few people. Any way we could escalate this somehow so the team is aware the issue here is growing?
Hi @Bryan_TeamKickstart, you are right, my mistake. The notifications don’t show the email address of the submitter. Sorry about that! I’ll edit my comment to correct it.
Unfortunately, since these issues involve account details, they do need to be handled by our Support team directly. They are aware of these reports and are actively working with the relevant teams to resolve things as soon as possible. I’ve also confirmed that they can find the source of the message with the URL link. 
@Vanessa_N - I understand your comments on privacy, but I’m just saying, as soon as spammers/scammers get news that this new method of using Asana to distribute Meta scam links, it’s gonna blow up as a wide-spread issue. Hopefully the team can get ahead of it.
No worries, I completely understand your concern! I can assure you that we are not only working to resolve these specific incidents reported but also taking steps in the background to prevent this issue from happening in the future. Support is receiving and addressing the reports on a case-by-case basis, but our Development teams are monitoring everything and working behind the scenes on long-term solutions.
Awesome. @Vanessa_N - thank you for all you do. It’s much appreciated and you and the community/forum teams are such a huge part of helping Asana continue to improve and evolve based on user needs.
Thanks, @Bryan_TeamKickstart! I really appreciate all your support and feedback too! 
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.
