Spam bots surf the Internet every minute of every day—just looking for ways to create free accounts and/or spoof their identity. If you open up your site to commenting and Free Registration (of any sort), you can expect to find lots of this unless you take the proper precautions. Comment Mail provides several tools to help you avoid spam.

You can filter out fake subscriptions by having them first confirm via a valid email. Please see: WordPress Dashboard Comment Mail Config. Options Auto-Confirm Settings

Comment Mail: Auto-Confirm Settings

This can be taken a step further by Blacklisting specific email addresses or email patterns. Adding to this list of emails will prevent that email from subscribing to your site. Please see: WordPress Dashboard Comment Mail Config. Options Blacklisted Email Addresses

Comment Mail: Blacklisted Email Addresses

You can also strengthen your settings in WordPress to filter out some spam from anonymous and fake user comments. Please see: WordPress Dashboard Settings Discussion

  • Check "Comment author must fill out name and email"
  • Check "Users must be registered and logged in to comment"

If you want a more hands on approach to filtering out users and spam, please see the following settings in WordPress Dashboard Settings Discussion.

WordPress: Discussion Settings

In addition to the Comment Mail tools and the built-in WordPress discussion settings that help avoid spam, you can also integrate Google's reCAPTCHA service into your comment areas by downloading one of the many reCAPTCHA WordPress plugins available. reCAPTCHA is a free service to protect your website from spam and abuse. reCAPTCHA uses an advanced risk analysis engine and adaptive CAPTCHAs to keep automated software from engaging in abusive activities on your site. It does this while letting your valid users pass through with ease.