How To Block Comment Spams In WordPress?

Cоmmеnt spam (also called spomment, spam comments, spam in blogs, blog spam, or social spam) refers to a broad саtеgоrу оf “ѕраmbоt” or “ѕраmmеr роѕtіngѕ” that аbuѕе wеb-bаѕеd fоrmѕ to post unwanted information with a link аѕ comments оn fоrumѕ, blоgѕ, wikis, guеѕtbооkѕ, etc. It surely can hurt your SEO.

 

Block Spam Comments in WordPress

Block Spam Comments in WordPress

Block spam comments in WordPress

Blog comment spam is something really annoying mainly because of your primary goal when blogging is to only receive valid and relevant blog comments from your readers. Comments help build up communities. Instead, you are trying to sort through which ones are spam, and which ones are legit comments. By the time, you get around to a real comment from someone who actually enjoyed your posts, you are annoyed with all the spam and maybe not in a great headspace to leave a thoughtful reply and approve their comment. 

Blog comment spam is a form of spamdexing.
Spamdexing
is the practice of keyword stuffing or otherwise manipulating an index for a site with the intention of increasing the site’s ranking with search engines.

It can hurt your SEO strategy since Google considers you as being responsible for keeping your site clean. But, removing spam comments manually is tedious and exhaustive, cause most of them are automatically posted in impressive quantity by robots. Luckily, there аrе mаnу wауѕ fоr wеbmаѕtеrѕ tо соmbаt blоg ѕраm. 

1. What is comment spam?

Cоmmеnt spam in SEO (Search Engіnе Oрtіmіzаtіоn) tеrmіnоlоgу is аnу соmmеnt thаt hаѕ bееn posted tо a blоg for the рurроѕе оf generating аn inbоund lіnk to the соmmеnt аuthоr’ѕ оwn ѕіtе or blog. The use оf automated comment spam on WordPress from bots (i.e., соmmеnt spam bot) is a black hаt SEO technique, adopted in the attempt to improve a webѕіtе’ѕ link рорulаrіtу аnd аnсhоr text. 

 
2. Why can comment spam hurt your SEO?

When the comment section of a webpage becomes visually polluted by garbage content and spammy links, not only does the website owner get annoyed, but also its genuine visitors. It also signals that your website may seriously lose ranking positions in SERPs. Don’t forget that Google has a nose for garbage content and all adverse effects that spammy blog comments give rise to, such as: 

  • # Bots can crash your server (downtime) by inserting lots of comments into your database
  • # A spammed comments section looks unprofessional, lowering the site value
  • # Visitors demotivate to create valuable comments
  • # Comment fields are cluttered with garbage content
  • # Spammy links are anchored by irrelevant keywords
  • # Spammy links link your site to low DA/PA sites
 
3. Why do people do comment spam?

(a) To get a free backlink with ease

Why оn еаrth wоuld a spammer uses your blоg to tаrgеt a ѕеаrсh еngіnе? Gооglе ріоnееrеd a ѕеаrсh tесhnіԛuе called PаgеRаnk, which looks at the соntеnt оf thе webраgе being іndеxеd, who lіnkѕ to that раgе аnd whаt that backlіnkѕ ѕау. Thіѕ tесhnоlоgу mеаnt Gооglе wаѕ vеrу gооd аt returning relevant rеѕultѕ, mаkіng it thе most рорulаr ѕеаrсh еngіnе today.

Although Pagerank data are no more publicly available, Google’s ranking system still rеlіеѕ ѕо heavily оn the backlink-based PаgеRаnk algorithm. For this reason, unlіkе еmаіl ѕраm whеrе thе tаrgеt іѕ уоu (the receiver), comment ѕраm gеnеrаllу tаrgеtѕ ѕеаrсh еngіnеѕ. Many people will thus leave spam comments on your blog only to get a backlink pointing to their sites. Pеорlе ѕоmеtіmеѕ gаmе the ѕуѕtеm using a tесhnіԛuе саllеd “Gооglе Bombing”.

Thіѕ brings us bасk to the ѕраmmеrѕ. If a ѕраmmеr ѕеllѕ a product called “mysupplement” аnd wаntѕ tо bе аt the tор оf Gооglе search result pages fоr “mysupplement”, he will lеаvе comments оn hundreds or even thоuѕаndѕ of blоgѕ, lіnkіng back tо his webѕіtе wіth thе lіnk tеxt “mysupplement.” 

Google Bombing iѕ whеn a large numbеr оf dіffеrеnt ѕіtеѕ lіnk tо a раgе wіth the ѕаmе lіnk tеxt (anchor text) to іnfluеnсе thе ranking of thаt webраgе for a ѕеаrсh tеrm (a keyword query).

Spammers dоn’t rеаllу care if уоu ѕее thеіr gооglе bomb tеxt—іn fасt they’d rаthеr уоu don’t in case you decide tо delete іt! Thеу just wаnt thе search еngіnе to ѕее іt whеn they іndеx your page. They just want to dump their links in comments to gain link juice or PageRank from the blog they’re commenting on.

Many people still believe that a link placed in the comments section of any blog – no matter the topic is computed by Google crawler as a backlink that contributes to improving PageRank. Since 2005, the majority of blogs, by default, set such links with the nofollow tag, but Google won’t even follow them.

NoFollow links do not pass link juice! Backlinks created in comments will pass link juice ONLY IF the blog owner has turned off the nofollow tag for the comments section. These specific types of blogs are so-called “DoFollow blogs”.

(b) To get brand awareness, stuff promotion, etc.

Even when backlinks do not pass link juice, blog commenting may still help brands to gain visibility and promote their goods. It happens because even if Google doesn’t follow the link, people do. If Google didn’t follow the link, chances are that someone else might. That’s why NoFollow links do not prevent comment spam! Spammers assume that even a NoFollow link is worth something. But, recall that comment spams are rapidly deleted by site owners.  

Blog commenting is rather an opportunity to build relationships and grow credibility. Be thus selective when implementing your SEO-linking building strategy, cause you are creating relationships between your site and others, under Google’s eyes. Don’t risk your brand credibility and trust by spamming comments. Whereas comments spam in blogs may downgrade your site positions in SERPs, blog commenting for SEO purposes may improve your rankings by establishing your site as a niche authority.

Even when you hire a blog comment service, you will be still at risk of getting backlinks created just like spammers do. Actually, there is a clear difference between “blog commenting for SEO purposes” and “spamming comments in blogs“. We will go through how to implement the blog commenting tactic as a white-hat SEO strategy in another post soon.

Comment spam posted by a loan business in a cybersecurity blog post

Comment spam posted by a loan business in a cybersecurity blog post

(c) To inject malicious code via input forms

The user login and the comment forms are one of the most vulnerable areas for spammers to take advantage of. Cybercriminals continue to look for new ways (also using input forms) to inject malware into your site.

Most often, spam links point to text files, tables, presentations, and other documents containing text and a link, say, to an advertised product or phishing page. Actually, the connection between spam activities and phishing goes beyond sending phishing emails.

Malicious HTML code can get into the source code by innerHTML. Let’s remember, that innerHTML is the property of a DOM document and with innerHTML, we can write dynamic HTML code. It is used mostly for data input fields like comment fields, questionnaire forms, registration forms, etc. Therefore those elements are most vulnerable to HTML attack.

According to Kaspersky Lab’s Anti-Phishing in Q2 2019, the first category of organizations subjected to phishing attacks were banks (30,68%), followed by payment systems (20.12%).

The next victims were global Internet portals (18.02%), social networks (9.08%), and online stores (7.14%). In reality, every website gets exposure to spammers at some point in time.

The rating of attacks by phishers on different categories of organizations

Attacks by phishers on distinct organizations

 
4. How to identify blog spam comments?

When you start short managing your own website or visit someone else, you will surely find comment spams that are either:

Comment spams in WordPress

Comment spams in WordPress blog

  • # Self-promotional comments 
  • # Content copied from another site 
  • # Comments with a fake or no photo
  • # (Un) Related ads to the post content 
  • # Random characters in the name field
  • # Comments containing a phishing link
  • # Comments only to embed a sales link 
  • # Excessive spelling or grammar mistakes
  • # Sex shop, porno ads linked to adult sites
  • # Comments unrelated to the post content
  • # Unsolicited supplements ads (e.g., covid)
  • # Short comments (e.g., “Great“, “Thanks“)
  • # Repeated comments and/or repeated IP 
  • # Bad comments from top comment spammer countries (USA, China, Russia)
  • # Abusive comments (attacks) on a basis of race, ethnicity, citizen, sexual orientation, gender, religion, age, disability, etc. 

5. How to reduce spam comments on WP sites?

(a) Pre-moderate comments: WordPress has several built-in measures for dealing with blog comment spam and other associated disturbing behavior. Follow the steps below through the WordPress admin dashboard to minimize the comment spam issue.

WordPress other comment settings

    1. # Settings > Discussion Settings > Other comment settings > Mark Users must be registered and logged in to comment
    2.  
    3. GOOD: Since comments are restricted to registered users, spammers will prefer other blogs that accept guest comments
    4. BAD: The signup requirement also discourages genuine visitors to make comments
    5.  
    6. # Settings > Discussion Settings > Other comment settings > Mark Automatically close comments on post older than ______ days
    7.  
    8. GOOD: Bots cannot comment on older pages
    9. BAD: You won’t be able to receive comments from your genuine visitors after this period of days, usually set to 7, 15, or 30 days
    10.  
    11. # Settings > Discussion Settings > Before a comment appears > Mark Comment must be manually approved
    12.  
    13. GOOD: After setting a comment moderation system, any comment made on your site will be held as pending until it is reviewed by you
    14. BAD: You’ll spend hours checking each comment, to let it through or trash it. Also, you will lose real-time discussions on your site
    15.  
    16. WordPress before a comment appears
    17.  
    18. # Settings > Discussion Settings > Comment moderation > Type 0
    19.  
    20. GOOD: It will decrease the number of spam links allowed per comment, but not avoid at all
    21. BAD: Even if you set the number to 0, it won’t block a spam comment. Spammers may post links with spaces (e.g.; spam . domain. ru), which won’t be counted as a link by WordPress. But, visitors can still recognize them as links, copy them to the address bar, and visit
    22.  
    23. # Settings > Discussion Settings > Comment moderation > Type your blacklist of words either on the Moderation queue box or the Disallowed comment keys box
    24.  
    25. GOOD: It will either hold on queue or trash all comments containing the blacklisted keywords, such as sex shop, supplements, erotic, etc.
    26. BAD: You may be eventually discarding legit comments by your desired readers
    27.  

WordPress comment moderation

(b) Install captchas

    1. # Install the Simple Google reCAPTCHA plugin > Click on the register your domain link >  Sign in to your Google account to see the Register a new site page > Type yourdomain.com in the Label field > Mark the reCAPTCHA V2 and I’m not a robot Checkbox > Mark Accept the reCAPTCHA Terms of service and Send alerts to owners > Click on Submit to Google shows your COPY SITE KEY and COPY SITE SECRET > Head back to WP Settings >  Google reCAPTCHA keys > Paste your site key and the secret key and Save Changes
    2.  

Simple Google reCaptcha plugin

Register a new site recaptcha

(c) Keep the Nofollow attribute for comment

        1. In 2005, Google recommended the NoFollow tag (i.e., rel=”nofollow”) to every outbound link in the comments section. NoFollow links instruct Google NOT to follow that link. The NoFollow attribute is set by default in WordPress’ comment section, but some bloggers turn it off, to motivate more legit comments (though it’ll also increase comments spam and thus the server load).

       

.

    1. <a href="http://www.domain.com" rel="nofollow">Domain Link</a>

       

Search еngіnеѕ hаvе a “nofollow” іnіtіаtіvе thаt lets wеbmаѕtеrѕ tеll ѕеаrсh еngіnе rоbоtѕ nоt to give сrеdіt tо lіnkѕ іn blоg соmmеntѕ. The hope was that spammers would stop leaving those nasty, spammy comments. But, this tatic оnlу рrеvеntѕ соmmеntѕ іf spambots are setup tо іgnоrе “nofollow blоgѕ”. In fact, mаnу оf ѕраmmіng scripts are nоt vеrу rеfіnеd. Don’t turn off the default nofollow tag for blog comments on your website. Instead, you could add the nofollow tag to external links you put inside your posts, but that you do not endorse.

 

(d) Disable comments on a specific post

      1. # Posts > All Posts > Open the specific post > Click on the cog icon in the upper right corner > Discussion > Uncheck Comments
      2.  
      3. Disable comments on a specific post
    1.  
    2.  
    3. (e) Disable comments on all posts
    4.  
      1. # Settings > Discussion Settings > Default post settings > Uncheck Allow people to submit comments on new posts
      2.  
      3. Default post settings
    5.  
    6. (f) Remove the URL field from the comment form

       

        1. # Install the plugin Comment Link Remove and Other Comment Tools > QC CLR Settings > Check Remove WEBSITE Field from Comment Form and Remove hyperlink from comment AUTHOR Bio and Save Changes

       

       

 


Or add the code to Appearance > Editor > Click on functions.php 

add_filter('comment_form_default_fields', 'unset_url_field');
function unset_url_field($fields){
    if(isset($fields['url']))
       unset($fields['url']);
       return $fields;
}

Remove URL field from the WordPress comment form

(g) Install an anti-spam WordPress plugin

WordPress plugins can blосk mоѕt tуреѕ of ѕраm соmmеntѕ, such as Akіѕmеt Anti-Spam. Developed by Automattic, the company behind WordPress, this is one of the most popular cloud-based and free anti-spam plugins for WordPress. Its free version is a default WordPress plugin, having a limit of 50,000 comment checks a month. Paid plans start from $5 a month, which is a pretty sweet deal for spam. It also seamlessly integrates with the Jetpack and Contact Form 7 plugins.

Akismet is one of the best options available to avoid spam comments on WordPress. You should note, however, that there are a lot of anti-spam plugins out there, with excellent reviews, and which are free and easily downloadable from the wordpress.org site, such as:

  1. # Titan Anti-Spam & Security 
  2. # Akismet Spam Protection
  3. # Stop spammers Security
  4. # WordPress Zero Spam
  5. # Anti-Spam Bee
  6. # CleanTalk 
  7. # WP Cerber

(h) Move to a third-party comments system

There are several privacy-focused, fully-featured commenting platforms out there, which can insert a new comments system to your website, preventing you to get overwhelmed by comments spam. Choose a platform that best suits your needs. We cite here three reliable options:

  1. # Disqus
  2. # Hyvor Talk
  3. # Facebook comments
  4.  

Disqus allows getting your audience engaged into commenting through email and social media accounts, but add a few ads to your site. Facebook comments plugin is limited to users able to log in to Facebook. But, if someone leaves you comments on the stuff you put forward on the website, the friends and followers of that person on FB will see that comments in their feed. It means that installing the Facebook comments plugin on your site will help to grow your audience directly on Facebook. These platforms may bring you:

  1. # Reactions plugin
  2. # Real-time comments
  3. # Built-in spam protection
  4. # All moderation features
  5. # Importing from WordPress
  6. # No more weight to your database, which increases site speed

Disqus comments

Disqus comments on your website