If you’re seeing spam comments filled with Bitcoin links, WhatsApp numbers, or strange URLs, take a breath, this is not a sign that you’ve done anything wrong. It’s something nearly every blog experiences at some point, especially in the early stages.
Recently, a reader reached out to me asking for help after her blog started getting hit with spam comments across multiple posts. She was worried she had missed an important setting or misconfigured something. The truth is, this kind of spam isn’t caused by mistakes, it’s caused by automated bots scanning the web for open comment sections.
That message reinforced why this topic matters. Comment spam is one of those behind-the-scenes realities of blogging that rarely gets discussed, yet it affects beginners and established sites alike. With the right setup, it’s completely manageable – and once you know what to do, it stops being stressful and becomes just another box you’ve checked off in protecting your site.
Here’s what’s really going on, why your spam filters feel useless, and how you can finally get ahead of this mess — without turning off comments forever.
Why Am I Getting Spam Comments on EVERY Blog Post?
Because spam bots don’t behave like humans.
Bots don’t read your content. They don’t choose posts based on topics. They don’t even care if your blog is brand new.
They simply crawl your site, find the comment fields, and dump junk everywhere.
And worst of all?
If they find one open comment form, they spam every single post you’ve ever published.
It’s not personal- it’s automated so don’t think ” WHY ME????”
Most new bloggers don’t find out until they wake up to 15 comments saying:
“Message me on WhatsApp +91xxxxxx I recover your stolen Bitcoin!!!”
Welcome to the party.
Why Your Spam Plugin Isn’t Catching Everything
You’ve probably tried:
✔ Changing comment settings
✔ Adding keywords
✔ Blocking IPs
✔ Installing spam plugins
✔ Adjusting moderation rules
And yet… the spam STILL gets through.
Why?
Because bot spam is constantly evolving.
They change:
- phone numbers
- link formats
- phrasing
- misspellings
- special characters
Every time you block a pattern, they generate five new ones.
This is why relying only on “keyword blocklists” never works long-term.
How to Stop Blog Comment Spam
After fighting this battle myself (and nearly throwing my laptop out the window), here’s what actually works.
These are proven, practical steps for WordPress, Blogger, or any CMS.
1. Use a Stronger Anti-Spam Plugin (Not Just the Default One)
Most built-in spam blockers catch about 50–60%.
Good plugins catch 95–99%.
The best options:
Anti-Spam Bee (Free, powerful, lightweight)
- No CAPTCHA
- Invisible protection
- Blocks bots using smart rules
- Great for beginners
CleanTalk Anti-Spam (Paid but extremely effective)
- Cloud-based spam detection
- Works across comments, forms, signups
- One of the highest detection rates
Akismet (Popular, good but not perfect)
- Works well for comment-heavy blogs
- Sometimes misses new spam patterns
Pick any of the above and you’ll already see a difference.
2. Close Comments Automatically After 30 Days
Bots LOVE old posts they find through your sitemap.
If you close comments on older articles, you instantly kill 70–90% of spam traffic.
Most platforms have this setting under Discussion.
3. Block Links Completely (For Now)
If you’re getting hammered, add this temporary rule:
Comments containing links = auto-trash.
Bots rarely post a comment without a link. Once your blog grows, you can relax this rule.
Also, remove Website URL Field From Comment Form
How to Implement This Properly
WordPress – Recommended Setup
- Remove Website URL field
- Install a plugin like Comment Link Remove
- OR use a theme option if available
- Block links in comments
- Go to Settings → Discussion
- Add to Disallowed Comment Keys:
http https www.
- Keep “Comment must be manually approved” ON (at least for now)
4. Improve Your Word/Pattern Blocklist
Instead of blocking 20 individual words, block patterns that bots use again and again.
Add these to your blacklist:
http:https:whatsappshorturlloant.mebtccontact metelegramdoctor(yes, the spell-caster ones…)healerspell
These catch massive amounts of variations.
5. Moderate First-Time Commenters Only
This is a good balance:
- New commenters = manual approval
- Repeat commenters = auto-approved
You keep control without having to approve every single reply forever.
6. Use “Human Verification” Without Annoying CAPTCHAs
Many tools now use invisible verification:
- checks mouse movement
- checks typing rhythm
- checks IP reputation
Real visitors never notice it, but bots get blocked instantly.
7. Turn On “Honeypot Protection”
A honeypot is a hidden field bots fill out, but humans can’t see. It silently blocks most spam.
WordPress
If using Anti-Spam Bee
- Go to Settings → Anti-Spam Bee
- Enable:
- “Mark as spam, not delete”
- “Use CSS honeypot” ← this is the one you want
- Save.
If using CleanTalk
- Go to Settings → CleanTalk
- Honeypot is automatically enabled, you don’t need to turn anything on.
- Human Verification- avaiable too
in short, cleantalk has more options- Honeypot, Human verification, IP reputation checks
That’s why CleanTalk catches more spam as it uses multiple layers.
If NOT using a plugin yet
You must install one. WordPress by itself does NOT include honeypot protection.
Blogger (Blogspot)
Blogger has no honeypot built in.
To add one, you must use a third-party comment system like:
- Disqus
- Commento
- Hyvor Talk
All of these have built-in honeypots.
Should You Disable Comments Entirely?
You can but don’t do it yet.
Comments help:
- SEO
- trust
- community
- engagement
- E-E-A-T signals (experience & authority)
Instead, keep comments ON but set them to approval before publishing until your anti-spam setup stabilizes.
This gives you full control without losing community interaction.
What New Bloggers Need to Know
If you’re new, here’s the truth nobody tells you:
- If your comments are open, spam WILL come.
- No plugin catches 100%.
- It’s not your fault.
- There are ways to eliminate most of it.
Once you set things up properly, spam becomes a rarity not a daily nightmare.
Final Thoughts: You’re Not Alone And You Can Fix This
Spam comments feel overwhelming the first time, but every established blog goes through this phase. Once your protections are in place, it becomes something you barely think about.
Related Read
AI Scams Are Exploding: How Hackers Use AI for Phishing, Deepfakes, and Voice Cloning
How to Block Scam Calls on iPhone?
How to block spam calls on Android?
A curated family safety toolbox with free cybersecurity tools and trusted products to protect your data, prevent identity theft, and stay safe online—at home or while traveling.
