PM'ing enabled for unverified accounts
 

I've been told that I have "PM'ing enabled for unverified accounts". Where should I go and change this feature?

Thanks!

AdminCP -> Usergroups

Thank you but in my version 3.5.4 in the Usergroup for Users awaiting email confirmation there is no option like: "Can use private messaging".

My forum was recently the target of a PM spam attack to all users by a user who didn't confirm the email address and activated the account.

There is only Maximum Recipients to Send PMs at a time:Do not set this too high for performance reasons (set to 0 to disable)

So I set this to 1, at least to make it difficult for the potential spammers to send spammy PMs to my forum's members...

Thank you!