Getting SPAM in contact form

Hello @copiaurbietorbi,

We’re sorry to hear that you’ve encountered spam issues.

If you’re still having spam with reCAPTCHA enabled, you can consider increasing the security level of the reCAPTCHA integration on your site.

For v2 reCAPTCHA, you can do this by going to your reCAPTCHA account. Then in the settings of your current integration, you can adjust the Security Preference slider.

For v3 reCAPTCHA, you can adjust the settings in your WordPress admin area by going to WPForms > Settings > reCAPTCHA. In this Score Threshold field, you can increase the score to a higher number for stricter security.

And if you’d prefer not to use reCAPTCHA, you can consider the third-party plugins such as WordPress Zero Spam or Spam protection, AntiSpam, FireWall by CleanTalk which work out of the box to protect your forms against spam.

Hope this helps!

Good day Prasant,

Thank you for getting back to us, but we don’t think you even read our initial message.

We have examples of the forms that we get through the site. And we are not supposed to get these spams inquries with the settings that we have and previously discussed in the forum.

Hello @copiaurbietorbi,

I apologize for the confusion and delay in getting back to you!

As you have already enabled reCAPTCHA, for the most part te spam protection feature of reCAPTCHA works fine. So, it might be the case that someone is manually filling up the form.

In case it helps, you can try adding the {user_ip} smart tags to your notification settings’ Message field to see if there’s a common IP addresses used. Once you have a common IP address that’s used to fillup the form which looks like a spam submission, you can follow this guide to block that IP address.

Thanks, and please let me know how it goes!

Hello Prasant,

Thank you for getting back to us. It seems that the {user_ip} tag that you are referring to is available on the pro version only. Is this correct?

Thank you for your help.

Hello @copiaurbietorb,

I apologize for any confusion!

In case it helps, the smart tags for the most part are available for the lite version which also includes the {user_ip} smart tag. You can simply copy the {user_ip} smart tag into the message field and that should work absolutely fine. Here’s a screenshot for quick reference.

Could you please let me know this answers your question, or if any extra details might be helpful?

Thanks!

Hello Prasant,

We will add this field to the forms and follow your advise. If the forms are manually filled then we may be able to block those malicious IPs.

Thank you for your help.

Hello @copiaurbietorbi,

Great, thanks for letting us know!

In the meantime, please feel free to let me know if you have any questions.

Thanks! ??

Hi @copiaurbietorbi ,

We haven’t heard back from you in about a week, so I’m going to go ahead and close this thread for now. But if you’d like us to assist further, please feel welcome to continue the conversation (please just see my post above).

Thanks!

Hello Prasant,

Thank you for checking on us. We were waiting to have another spammed form to check the functionality of the {user_ip} smart tag.

So far the conclusion is that these forms are filled out by someone. But now with the IP address is easier to take proper action and avoid the spam.

Thank you for your help and interest.