Stop Spammers Security is positioned differently from other anti-spam plugins. Where Akismet and Antispam Bee focus on filtering form submissions, Stop Spammers operates at the access level – it can block specific IPs, countries, email domains, and usernames from accessing your site entirely, before they even reach a form.
Understanding Stop Spammers’ Approach
Stop Spammers integrates multiple protection mechanisms: IP reputation checking, country blocking, username blacklisting, email domain blocking, and behavioural analysis. It also includes a CAPTCHA option for the WordPress login page – separate from comment and contact form spam.
This breadth makes it powerful but also more complex to configure correctly. Aggressive settings can block legitimate users. The default settings are conservative for a reason – they protect without false positives.
Initial Setup
Install from WordPress.org and go to Stop Spammers -> Settings. The dashboard shows real-time statistics on blocked attempts. Work through the settings tabs:
Protection tab – the core spam blocking settings. Enable:
- “Check IPs against spam databases” – uses public blocklists
- “Check email addresses against spam databases” – flags disposable and spam-used email addresses
- “Block suspicious usernames” – prevents registration with usernames like “admin”, “administrator”, “test”
Do NOT enable on initial setup:
- Country blocking – configure this only after reviewing your actual traffic data
- “Block all registrations” – only enable if you genuinely want to prevent any new user registration
Need help configuring this on your site? Describe your setup and get a free estimate from a vetted WordPress developer.
CAPTCHA Configuration
Stop Spammers can add CAPTCHA to the WordPress login page, registration, and comments. For the login page, CAPTCHA is a reasonable protection against brute force. For comments, consider whether CAPTCHA friction is worth it for your audience – most sites get better results from honeypot + IP checking than from CAPTCHA.
Go to Stop Spammers -> CAPTCHA. Options include built-in text CAPTCHA and Google reCAPTCHA v2/v3 integration. If enabling reCAPTCHA, you need API keys from Google’s reCAPTCHA admin console. Enter them in the plugin settings.
Country Blocking – When and How
Country blocking is Stop Spammers’ most aggressive feature. Only enable it if you have data showing that most of your spam comes from specific countries AND you have no legitimate users from those countries. Check your spam queue before enabling – if you see predominantly one or two countries in spam submissions, blocking them is justified. If spam comes from everywhere, country blocking does not help and adds false positive risk.
Access country settings in Stop Spammers -> Country. You can allow specific countries (whitelist mode) or block specific countries (blacklist mode). Whitelist mode is safer if your audience is geographically concentrated – only allow countries where you have actual users.
Customising With Filters
To whitelist specific IPs from all Stop Spammers checks (your office, staging servers):
add_filter('stop_spammers_whitelist_ip', function($ips) {
$ips[] = '123.456.789.0'; // your IP
return $ips;
});To customise the blocked user message:
add_filter('stop_spammers_blocked_message', function($message) {
return 'Your submission could not be processed. Please contact us directly.';
});