4 Effective Ways to Stop WordPress Comment Spam (Plugin, reCAPTCHA, and Built-In Features)

WordPress comment spam is a familiar problem website owners have to face. With spam comments spreading on your site, visitors may consider your website to be of poor quality, and search engines may mark your site as unsafe.

Reducing these spam comments is vital to maintain your website’s reputation. This article will explore four practical ways to stop comment spam on your WordPress site.

Download All in One WordPress Cheat Sheet

Comment spam is a comment left by spambots irrelevant to your content and aims to use your site as an advertisement for their website or acts as a form of a phishing attack. Comment spammers usually leave hyperlinks and make unsuspecting visitors click on them to increase their search engine rankings.

How to Prevent WordPress Comment Spam From the Admin Dashboard

Protecting your site from spam comments starts within the admin dashboard. We’ll explore the options to manage your comment section using the built-in WordPress features.

Allow Comments from Registered Users

One of the ways to combat spam comments on your posts is to create an additional obstacle for spammers. You can do this by only allowing registered users to comment.

  1. To do this, open the Settings menu on your Dashboard.
Accessing the Settings menu on the WordPress Dashboard.
  1. Then, go to the Discussion page.
Accessing the Settings → Discussion page on the WordPress Dashboard.
  1. Under the Other comment settings section, check the Users must be registered and logged in to comment option. Save your changes.
Enabling the Users must be registered and logged in to comment option on WordPress.

Turn On Comment Moderation

Managing your comments is a great way to protect your website from spam. You can moderate comments with the built-in feature in WordPress, as you will have complete control over comments posted on your site.

Enable comment moderation by going to Settings Discussion and scrolling down.

Here you can set WordPress to notify you via email whenever a new comment is present so you can check whether or not it’s a spam comment.

Another option is to approve each comment before it’s posted manually. Turn this on by checking the Comment must be manually approved option.

To allow previously approved users to post new comments without manual approval, tick the Comment author must have a previously approved comment.

Enabling the Comment author must have a previously approved comment option on WordPress.

Make a List of Blocklisted Words

You may find spam comments on your site containing some specific keywords. You can automatically put these comments in the trash folder to save time.

You can list the blocklisted keywords, and comments containing those will be deleted automatically. Choose the words carefully so that you won’t accidentally delete comments from users with good intentions.

Using the Disallowed Comment Keys feature on WordPress, you can block specific words from appearing in the comments section.

Under the WordPress Discussion menu, scroll down until you see the Disallowed Comment Keys option. Then, fill it with keywords you wish to block.

If you’re concerned with specific keywords but don’t want comments to be automatically deleted, you can set WordPress to flag you every time they’re posted instead.

Using the Comment Moderation feature, you can list specific keywords in the comments section that you need to manually approve before they're posted.

When listing the keywords in the Comment Moderation section, comments containing those words will go to the comment moderation queue instead of the trash folder. You will be notified of potential spam messages and won’t lose authentic comments.

One of the key characteristics of spam comments is the high number of hyperlinks. Therefore, you can set comments with a certain number of links to go into the moderation queue before they’re posted.

Setting a limit on the number of allowed links in comments on WordPress.

Disable Comments Completely

Turning off the comments section will potentially make you lose valuable information or questions from your visitors. However, this option will eliminate any possibility of spam messages appearing on your website.

Remember that this option will restrict people from commenting. You can also delete all comments if you want to do so.

Setting to disable the comment section.

To disable comments entirely, scroll down on the Discussion page until you see the Default post settings section. Then, deselect the Allow people to submit comments on new posts option.

Note that people will still be able to comment on your previously published posts. To disable comments for your previous entries, you’ll need to change the settings for each published post individually.

How to Use a CAPTCHA to Prevent WordPress Spam Comments

Many spam comments are left by bots, which is why CAPTCHA can be an excellent tool for you. CAPTCHA generates a form or question to prove that the user is not a bot. You can add CAPTCHA to your WordPress site by using a WordPress plugin.

One of the best options available is to use Google reCAPTCHA. WordPress users may find reading obscure letters and numbers or picking out images too much of a hassle.

When implementing Google reCAPTCHA in WordPress, users only need to tick a box confirming that they’re human. However, if it finds any suspicious traffic, it will present a set of images you need to identify first.

The reCAPTCHA by BestWebSoft plugin can be downloaded from Dashboard → Plugins.

reCaptcha by BestWebSoft plugin

How to Stop WordPress Comment Spam Using a Plugin

You can stop comment spam easier in WordPress by installing an anti-spam plugin. Here are a few great options:


Akismet Spam Protection is a free plugin developed by Automattic. This plugin checks all comments and filters out the ones that look like spam.

Since spam comments usually contain several hyperlinks, Akismet shows the URL in the comment body to reveal hidden or misleading links. Moderators can also see the number of approved comments for each user to save time.

Akismet Spam Protection plugin

Disable Comments

We’ve explained earlier that you can use the built-in WordPress feature and disable comments on the Discussion page. However, disabling comments will not turn the comments section off for previously published posts.

You can use the Disable Comments WordPress plugin to close comments entirely on all of your posts. Furthermore, you can individually select which post, page, or media file should allow visitors’ comments.

Disable Comments plugin

How to Use a Web Application Firewall to Stop WordPress Spam Comments

Web application firewall (WAF) as Cloudflare helps protect web applications by monitoring HTTP traffic between a web application and the internet. It shields your website and your WordPress host by filtering and blocking all the bad proxy traffic and bots.

Since spam comments are usually generated by spam bots with suspicious traffic patterns, you can reduce these unwanted comments by preventing bots from visiting your site altogether.


Reducing spam comments is vital for maintaining your website’s authority. In this article, we’ve explored effective and practical ways to stop spam comments. Here’s a quick recap:

  • Using built-in WordPress features. Watch over your comment section with this built-in feature.
  • Enable Google reCAPTCHA. Make sure that no spambots are allowed to post comments using this security method.
  • Install a WordPress plugin. Download and activate a third-party anti-spam plugin to automate the comments section moderation on your website.

If you wish to learn more about improving your WordPress website further, we’ve prepared a tutorial just for that.

Finally, if you have further questions or suggestions, let us know in the comments section.

The author

Mulan G.

Mulan is a Digital Marketing enthusiast experienced in creating social media content. She is eager to help people learn in the simplest way possible. During her free time, Mulan likes to cook and watch sci-fi or documentaries.