Leave comments open on a WordPress site for long enough and the spam arrives — automated junk pushing dodgy links and gibberish. Left unchecked it buries real comments and can even harm your SEO. Here’s how to stop it without shutting out genuine readers.
Turn on comment moderation
First line of defence: nothing appears until you approve it. Go to Settings → Discussion and require that a comment be manually approved, or at least that the author has a previously approved comment. This ensures spam never reaches your visitors even if it slips past other filters.
Use an anti-spam plugin
A dedicated anti-spam plugin catches the overwhelming majority of junk automatically, checking each comment against known spam patterns before it ever reaches your moderation queue. This is the single most effective step — it does the heavy lifting so you’re not manually deleting hundreds of comments.
Add a challenge for commenters
A lightweight challenge — a simple question, an invisible check that verifies the commenter is human — stops automated bots cold without the friction of the old distorted-text puzzles. Modern invisible checks are effective and don’t annoy real readers.
Restrict links and hold flagged comments
Spam is almost always about links. In Settings → Discussion, set comments containing more than one or two links to be held for moderation, since legitimate comments rarely stuff in multiple links. You can also maintain a list of blocked words and URLs that automatically bin matching comments.
Close comments on old posts
Spammers often target older posts that get less attention. Set comments to close automatically after a post is a certain number of days old — under Settings → Discussion — so ancient posts stop being spam magnets. Recent, relevant discussion stays open; stale posts don’t.
Clean out the existing backlog
If you already have a spam pile-up, clear it. Go to Comments, filter by Spam, and bulk-delete. Do the same for any pending junk. Starting from a clean queue makes the ongoing filtering much easier to manage.
Consider whether you need comments at all
If comments aren’t adding value to your particular site — many business sites don’t use them — disabling them entirely removes the problem at the source. Our guide on disabling comments covers every option.
Layer moderation, an anti-spam plugin and a human check, and the flood dries up to a trickle you barely notice.
