Spam comments are one of the most common irritations on WordPress websites. Some are obvious nonsense. Others are thinly disguised attempts to place links, promote questionable services or push visitors towards unsafe websites.
Left unchecked, spam can make a site look neglected and create unnecessary work for the person managing it. The good news is that WordPress gives you several ways to reduce spam before it becomes a problem.
Decide whether you need comments at all
Not every website needs a comment section. For a company blog, service website or brochure site, comments may not add much value. If you do not have time to moderate them properly, it may be better to disable comments completely or only allow them on selected posts.
In WordPress, you can change the default discussion settings for new posts and close comments on older content. This alone can remove a large amount of spam.
Use moderation settings
WordPress includes built-in comment controls. You can require comments to be manually approved, hold comments with multiple links, require a name and email address or only allow comments from users who are logged in. You can also send certain words, IP addresses, email addresses or URLs to moderation or the trash.
Manual approval adds work, but it gives you control. For many small business sites, that is a fair trade-off.
Limit links in comments
Many spam comments exist for one reason: links. By holding comments that contain links, you can catch a large portion of low-quality submissions before they appear publicly. This is especially useful because spam comments often include several links or strange anchor text.
If comments are valuable to your site, keep the discussion open, but make link-heavy comments harder to publish automatically.
Use a reputable anti-spam plugin
Anti-spam plugins can reduce the volume of junk comments reaching your moderation queue. Akismet is one of the best-known options and is closely associated with WordPress. Other anti-spam tools use methods such as behaviour checks, known spam databases, honeypot fields or cloud-based filtering.
When choosing a plugin, check that it is actively maintained, compatible with your version of WordPress and suitable for your privacy requirements. Avoid installing several plugins that all try to do the same job.
Consider honeypot protection
A honeypot is a hidden field that real visitors do not see, but many automated bots try to fill in. If that hidden field is completed, the submission can be blocked as spam.
Honeypot protection can be useful because it often works without forcing genuine visitors to solve puzzles or click through extra checks. It is not perfect, but it can be a good low-friction layer.
Be careful with CAPTCHA
CAPTCHA tools can help stop automated spam, but they can also annoy real users. If you use CAPTCHA, choose a setup that is as unobtrusive as possible. The aim is to reduce spam without making genuine comments, form submissions or enquiries harder than they need to be.
For many sites, a combination of moderation, an anti-spam plugin and sensible settings is enough.
Close comments on older posts
Older posts often attract spam long after real discussion has ended. WordPress lets you automatically close comments after a set number of days. This can be useful for blogs where comments are only relevant around the time the article is published.
You can still leave comments open on posts where active discussion matters.
Keep WordPress maintained
Comment spam is not only a content problem. Keep WordPress core, themes and plugins updated. Remove unused plugins and themes. Use strong passwords, limit unnecessary user accounts and make sure your site is backed up.
A neglected WordPress site is more likely to attract wider security problems, not just spam.
Review your queue regularly
Even with good protection, some spam may get through. Check the moderation queue regularly, mark spam correctly and clear out anything that does not belong.
If spam volume suddenly increases, review your settings, plugin protection and whether comments are still needed on the affected posts. Spam comments are easier to control when you deal with them early.
With the right WordPress settings, a reliable anti-spam tool and a little routine maintenance, you can keep comments useful without letting spam take over your site.