Look, I get it. Combating spammers is a full-time job. But it feels like you, Square, aren't even putting in an hour a week at fixing this glaring problem. Here's an example of my morning on Excalibur.in your game.
I logged in at 10:29am local time.
First spam message at 10:44am.
Second also at 10:44am. Same player, same message.
Third at 10:45am. Different player and web site.
Spam messages received by spammer #1: 11:09, 11:29, 11:48, 12:07
Spam message from same web site as #2, but different player at 11:09.
Spam message from same web site as #2, but yet another different player at 11:19.
Spam message from a third web site at 11:30.
I turned busy on at 12:07 after the last message. That means in an hour and a half-ish, I received 10 spam messages from 3 separate web sites and 5 different players. Obviously, spammer #1 should never have made it as far as he has, but we, as a player group, have stopped reporting spammers because it seems you don't even care.
Let's talk about spammer #1. Not only did he hit me 6 times with essentially the same message, but he lasted longer than the other spammers. The message he sent was exactly 123 characters each time. All but 3 of those characters were IDENTICAL. That means that 97.5% of his message was identical, and sent probably over a hundred times in the 90ish minutes that I received 6 messages. HOW IS THIS NOT CAUGHT BY AN AUTOMATIC FILTER?! Is all it takes is 3 unique characters at the end of a message to skip your filter? If that's all it takes, I'm sorry, but your filter is absolute garbage. That's the filter of the 80's when spammers were stupid. There's absolutely no way that a message that is 97.5% identical repeated hundreds of times over a 90 minute spam should not be caught automatically. It should not take reports from players. This is BASIC spammer control. And it's badly lacking.
You need to make it harder for spammers to get around your automatic spam catchers. You need to make it harder than 97.5% identical. You need to make it so they have to retype each message, so that it becomes WORK to avoid detection. Eventually, the work gets to be too much and the smaller websites will fade away. They stick around now, because it's easy, because they have stolen credit cards to register accounts from stupid players who actually buy from them, it costs them nothing, and it's easy to avoid detection, and players are so apathetic to it at this point, they don't even bother to report anymore.
I should not have to endure a spam message every 10 minutes (and really, that's a slow day) from THE SAME PLAYER with THE SAME MESSAGE for 90 minutes. Come ON, SE, you are better than this. You have got to step up your game, to act like you actually care about hands-down the most detrimental part of gameplay