How to stop spam comments in WordPress without killing real discussion

If your WordPress comment section is filling up with junk links, fake offers, and bot gibberish, but you don’t want to nuke comments entirely, this is the balanced fix. I’ll show you how to stop spam comments automatically while keeping the real ones — the genuine reader replies that actually add value to your posts.

When I launched my food blog Caloriematterss, the comment section turned into a dumping ground almost immediately: random links, sketchy sales pitches, the works. My first instinct was to shut comments off completely. But that would have thrown away something worth keeping — real readers asking real questions, which builds community and signals an active, engaged page. So I found the middle path, and that’s exactly what I’ll share here: free, no-code settings that stop spam before it starts without silencing your actual audience.

Why spam comments are worth taking seriously

Even though spam usually doesn’t publish without your approval, it still causes real damage if you ignore it:

• It clogs your moderation queue, so you waste time wading through junk to find real comments.
• It slows down your WordPress backend as the spam table balloons.
• It tempts you into mistakes — approve one disguised spam link and you’ve published a bad outbound link.
• It can hurt SEO if malicious or spammy links slip through to your live pages.
• It just keeps coming, relentlessly, until you put a system in place.

The good news is that stopping it is a one-time setup, mostly free, and doesn’t require touching code. Once your system is in place, spam becomes a background nuisance you barely think about instead of a daily chore — and you get to keep the part of your comment section that actually matters.

The goal: block bots, keep genuine comments

Before the how-to, let’s be clear about what you’re aiming for, because the wrong fix causes its own problems. You don’t want to turn comments off entirely, block every link automatically, or make it so hard to comment that real readers give up. Genuine comments are worth protecting — an active discussion signals to both readers and search engines that your content is alive and useful.

What you actually want is to filter out bots and junk, keep real readers and their replies, and do it automatically so you’re not moderating manually all day. Here’s how to stop spam comments while doing exactly that.

Step 1: Turn on smart comment moderation

WordPress has built-in controls that handle a lot of spam before you install anything. Go to Settings → Discussion and set these:

• Comment must be manually approved — keep this ON so nothing publishes without your say-so.
• Hold a comment in the queue if it contains links — set the link threshold to 1. Most spam carries links, so this flags the bulk of it for review.
• Comment blocklist / disallowed keys — add the words that show up in the spam you actually receive. Common ones include gambling, pharmaceutical, and adult-content terms. Comments containing them get sent straight to trash.

These native settings alone will hold or bin a large share of spam. They’re your first, free line of defence to stop spam comments before a plugin even gets involved.

Step 2: Install Antispam Bee (free, lightweight, no code)

For automated filtering, I use Antispam Bee. It’s free, lightweight, doesn’t slow your site down, and — importantly — it’s GDPR-friendly and doesn’t require a Jetpack or third-party account the way some alternatives do.

To install it:

1. Go to Plugins → Add New.
2. Search Antispam Bee.
3. Click Install, then Activate.

Then open Settings → Antispam Bee and enable a sensible set of options:

• Trust approved commenters — regulars who’ve been approved before sail through.
• Block comments from specific languages — if your blog is English-only, blocking comments in scripts you never receive legit comments in cuts a lot of bot spam.
• Validate the IP address — catches known bad actors.
• Delete existing spam after a few days — keeps your database clean automatically.
• Notify admin by email — optional, if you want to keep an eye on what’s caught.
• Use a local spam database — keeps filtering fast and private.

These settings block bots quietly in the background while leaving genuine comments untouched. This is the core of how you stop spam comments without lifting a finger day to day.

Step 3: Keep comments open — but manage them smartly

It’s tempting to just disable comments everywhere the moment spam appears. Resist that, because genuine discussion has real value. Instead, manage where and how comments are allowed:

• Disable comments on old posts that no longer need discussion — use a bulk edit to switch off “Allow comments” on posts past a certain age, since old posts are common spam magnets.
• Allow comments only on the post types that benefit from them — for a food blog, that might be recipes and guides where readers ask real questions.
• Add a CAPTCHA if bots persist — a lightweight reCAPTCHA (via a plugin like WPForms or your comment plugin) stops bots from submitting the form at all, without hassling real readers much.

The principle is simple: keep comments where they add value, close them where they only attract spam.

Step 4: Clean up the spam you already have

If you’re setting this up after months of neglect, you may have hundreds of spam comments already sitting in moderation. Clear the backlog:

1. Go to Comments → Spam.
2. Click Empty Spam to delete everything flagged as spam in one go.
3. For pending comments, sort through and bulk-delete anything matching obvious spam patterns.

Once the backlog is gone and your filters are on, your queue stays manageable — you’ll only see the occasional real comment to approve.

A note on comments and SEO (the honest version)

Because the title mentions backlinks, let me be straight about what comments can and can’t do for SEO, since there’s a lot of bad advice out there.

Genuine reader comments help indirectly: they add fresh, relevant content to the page, signal engagement, and can surface long-tail keywords naturally when readers ask questions in their own words. That’s real, legitimate value, and it’s a good reason to keep comments open.

What comments are not is a shortcut for building backlinks by dropping your own links into comment sections — your own or other people’s. Search engines discount or ignore self-placed comment links, and doing it at scale can look manipulative. So the smart play isn’t to farm links in your comments; it’s to keep an active, spam-free discussion that makes your page genuinely better. That’s the SEO win, and it’s one you can be proud of.

Extra ways to reduce spam at the source

The moderation settings and Antispam Bee will handle the vast majority of spam, but a few extra habits shrink the flood even further before it reaches your queue.

Close comments automatically on older posts. In Settings → Discussion there’s an option to automatically close comments on posts older than a set number of days. Since old posts attract a disproportionate amount of bot spam and rarely get genuine new discussion, this quietly removes a whole category of junk.

Consider disabling comments on pages that don’t need them at all — your About, Contact, and landing pages, for instance. These pages never benefit from a comment thread but bots will happily target them, so switching comments off there is pure upside.

Finally, keep WordPress, your theme, and your plugins updated. Some spam and bot activity exploits known weaknesses in outdated software, so staying current is quietly part of how you stop spam comments and keep your whole site healthier at the same time. None of these steps take more than a minute, and together they mean far less reaches your moderation queue in the first place.

Antispam Bee vs Akismet: which should you use?

The two most common choices are Antispam Bee and Akismet. Both work, but they suit different people. Akismet is powerful and widely used, but it ties into a Jetpack/WordPress.com account and its free tier has usage conditions. Antispam Bee is fully free, doesn’t require an external account, is GDPR-friendly, and is lighter on resources — which is why I prefer it for a personal or small-business blog. If you’re running a large commercial site, Akismet’s broader network may be worth it, but for most bloggers Antispam Bee is the cleaner, simpler choice to stop spam comments.

Final thoughts

Stopping spam doesn’t mean silencing your readers. With WordPress’s built-in moderation settings plus a lightweight plugin like Antispam Bee, you can stop spam comments before they start, save yourself hours of manual moderation, and keep your comment section open for the genuine discussion that makes a blog feel alive.

Set it up once, and it runs quietly in the background. Your queue stays clean, your real readers keep talking, and you never have to choose between a spam-free site and an engaged one.

top WordPress security plugins—fix common WordPress errors” → speed up your WordPress website