Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?

A widespread “relay spam” campaign is abusing Zendesk ticketing workflows to flood users’ inboxes with legitimate-looking emails from brands like Discord, Riot Games, and Dropbox by exploiting open ticket submission settings; while links point to legitimate ticket systems and no phishing or malware is observed, the activity is disruptive. Zendesk has deployed new safeguards, and affected organizations should restrict ticket creation to verified users and constrain ticket titles, while recipients should delete unsolicited messages and avoid interacting with any links or phone numbers.