A common headache for WordPress site owners is the nonstop flood of spam in the comment section. These are usually off-topic messages or promotional links that have nothing to do with your content. Most often, they contain fake praise, suspicious links, or keyword-stuffed content. WordPress spam comments quite often and that is due to its popularity and open comment settings, which spammers actively target.
Credits: tagdiv
If these comments are left unchecked, they can hurt your site in several ways. They can hurt your SEO, make your site seem untrustworthy, and waste time you could spend on real engagement.
While you may not eliminate spam, you can reduce it significantly. This guide will show you why comment spam happens and tell you how to stop comment spam in WordPress using WordPress settings, plugins, and moderation tools.
What is Comment Spam and Why Does it Happen?
As we saw above, comment spams are those automated posts or misleading comments designed to drop links, promote products, or manipulate search rankings. They often come from spambots or humans. And they come in the form of generic compliments like “Nice post! Visit my site???” or "Check out this offer??? free-crypto-now.com", or large blocks of text filled with keywords and spammy URLs.
WordPress spam comments are frequent because of the platform’s popularity and
open comment system. Its settings are friendly to user engagement, but without
some configuration, they also leave room for spammers to exploit.
Examples of spam comments on WordPress
Configure WordPress Discussion Settings
Before adding plugins, start by tightening up the default WordPress settings. Go to Settings > Discussion in your dashboard, and adjust the following:
Manually Approve Comments
One method to block spam comments in WordPress is to take charge of who is
commenting. WordPress gives you the option to manually approve a comment
before it is displayed in your comment section. Turn on the option that says
“Comment must be manually approved”. This ensures nothing gets published
without your review.
Hold Comments with Links
Most spam contains links. You can configure WordPress to automatically hold
any comment that includes one or more links by setting a threshold under
“Comment Moderation”. Use the drop-down menu to select the number of links a
comment can have like as shown in the image below:
Keyword and IP Blacklist
Your next alternative to prevent WordPress spam comments is to utilize some of
the built-in moderation features. Under “Disallowed Comment Keys,” add
specific words, phrases, or IP addresses that should trigger automatic
rejection. Start with obvious spam terms and build your list over time.
Disable Comments on Older Posts
In the same settings panel, you can automatically disable WordPress comments
on posts older than a set number of days. This reduces the number of neglected
pages that attract spammers.
Reduce Manual Workload
Finally, to save time, create a system: check for comments once or twice a day, use bulk actions in the comment panel, and prioritize flagging repeat offenders.
Install and Configure Anti-Spam Plugins
If you need a stronger method to block spam comments in WordPress, then you can install WordPress plugins to handle it for you. Here are the top choices:
Akismet Anti-Spam
Akismet Anti-Spam WordPress is a comment spam plugin WordPress that catches
the most common types of spam comments. This plugin is pre-installed on many
WordPress sites and is a go-to tool that automatically filters out obvious
spam.
Now, let’s look at how you can configure Akismet on your website:
-
Activate the plugin
-
Connect it with a free API key from WordPress.com.
Once the API key is connected, Akismet will start protecting your website from spam comments.
Antispam Bee
A privacy-focused alternative, Antispam Bee doesn’t rely on third-party services. It checks for spam patterns, comment timing, and content signals.
First, install the Antispam Bee plugin and activate it. After that, head over
to your WordPress dashboard and open Settings > Antispam Bee to access the
setup options.
Then, it is easy to configure with all the checkboxes it has.
Disable Comments
If your site doesn’t need a comment section at all, this plugin lets you disable WordPress comments globally or on specific post types without editing themes or templates. You can use one of the in-built settings to do so. Here are the steps:
- 1. Click Settings in the side panel and click Discussion.
- 2. Deselect “Allow people to submit comments on new posts”.
-
3. Scroll down to the bottom of the page and click Save Changes.
Other Options
For advanced spam protection WordPress plugins like CleanTalk and WPBruiser
offer more aggressive anti-spam features. CleanTalk uses cloud-based
filtering.
CleanTalk plugin
WPBruiser, on the other hand, focuses on preventing bot submissions
without CAPTCHAs.
WPBruiser plugin
Add reCAPTCHA to Your Comment Forms
reCAPTCHA helps prevent WordPress spam comments by adding a challenge that makes users verify they’re human, like selecting images or checking a box. This stops bots from posting fake comments, helping keep your site clean.
Install a plugin like Simple Google reCAPTCHA, then:
- 1. Connect it to your Google reCAPTCHA account
- 2. Enable it on comment forms, registration pages, and login screens
- 3. Choose between v2 (checkbox) and v3 (invisible) based on your preference
This adds an extra verification step for users and keeps most bots out.
Disable Comments Entirely
Not every site needs a comment section. If your business does not rely much on the comments, then it’s better to turn it off rather than deal with constant spam.
You can
disable WordPress comments entirely by heading to Settings > Discussion and unchecking the box that says “Allow
people to post comments on new articles.”
At the top of that page, under Default post settings, you’ll find more
options you can disable to stop comments site-wide.
If you’d rather not mess with settings manually, install the Disable Comments plugin. It gives you an easy way to remove comment features from posts, pages, or everywhere at once.
Additional Tips to Prevent Spam
Make it a habit to review incoming comments regularly, spam filters aren’t perfect, and some slip through. Therefore, here are a few more tactics to strengthen your defenses:
- Moderate regularly: Staying on top of new comments helps prevent a backlog of junk.
- Disable pingbacks and trackbacks: These can also be abused for spam. Turn them off in Settings > Discussion.
- Block IPs manually: Use cPanel or edit your .htaccess file to block known spammy IP addresses.
- For sites with active communities, switching to a system like Disqus may be worth considering. It handles spam protection WordPress on its own servers and gives you more control over moderation, without relying solely on WordPress settings.
Conclusion
Spam prevention takes a combination of tricks and tools, such as the right settings, consistent moderation, and the right tools.
As we saw, there are multiple ways to control unwanted comments such as tightening WordPress’s discussion settings, to using plugins like Akismet anti-spam WordPress or Antispam Bee.
You can go further by disabling comments where needed, adding reCAPTCHA, or blocking abusive IPs directly. With all these choices, select the method that suits you best.
Start with the method that fits your site’s setup and audience then build from there.
We recommend combining moderation settings and plugins for the best long-term solution.
FAQs
What are spam comments on WordPress?
They’re junk messages posted in your comment section, usually by bots. Most
include random praise, suspicious links, or keyword-filled text that has
nothing to do with your content.
What’s the fastest way to remove thousands of spam comments?
CleanTalk has a feature that wipes out existing spam in bulk. It’s much
quicker than deleting them manually.
How do bots leave comments without visiting the page?
They don’t need to. Bots can send data straight to your comment form using
code, skipping the browser completely.
What should I do with comments marked as spam?
You can delete them all at once from the spam folder. If you leave them there,
WordPress will clear them out after 30 days.
