Plugin info

Total downloads: 122
Active installs: 90
Total reviews: 0
Average rating: 0
Support threads opened: 0
Support threads resolved: 0 (0%)
Available in: 1 language(s)
Contributors: 2
Last updated: 11/27/2025 (33 days ago)
Added to WordPress: 11/27/2025 (0 years old)
Minimum WordPress version: f
Tested up to WordPress version: 6.8.3
Minimum PHP version: f

Maintenance & Compatibility

Maintenance score

Actively maintained • Last updated 33 days ago

59/100

Is Dam Spam abandoned?

Likely maintained (last update 33 days ago).

Compatibility

Requires WordPress: f
Tested up to: 6.8.3
Requires PHP: f

Similar & Alternatives

Explore plugins with similar tags, and compare key metrics like downloads, ratings, updates, support, and WP/PHP compatibility.

Stop Spammers Classic
Rating 4.4/5 (242 reviews)Active installs 30,000
bbPress Notify (No-Spam)
Rating 4.8/5 (39 reviews)Active installs 3,000
WP Email Guard
Rating 0.0/5 (0 reviews)Active installs 100
Block Spam Comments
Rating 3.0/5 (2 reviews)Active installs 10
No English Comments
Rating 0.0/5 (0 reviews)Active installs 10
No Japanese Comments
Rating 3.0/5 (2 reviews)Active installs 0

Description

Dam Spam is a comprehensive spam protection plugin that blocks spam registrations, login attempts, comments, and contact form submissions. It provides multiple layers of protection including IP blocking, email validation, CAPTCHA challenges, and integration with third-party spam detection services.

How it Works

Dam Spam runs a series of configurable checks on registrations, logins, comments, and form submissions. When a submission is flagged as potentially suspicious, you can choose to block it outright or present a CAPTCHA challenge. Legitimate users are cached to speed up future submissions, while known spam sources are permanently blocked.

Features

  • Multiple Protection Layers – Block spam using IP lists, disposable email detection, and behavioral analysis
  • CAPTCHA Support – Integrate with Google reCAPTCHA or hCaptcha to challenge suspicious submissions
  • Third-Party API Integration – Connect with Akismet, Stop Forum Spam, BotScout, and other spam detection services
  • Customizable Challenges – Present challenges only to suspicious users while allowing legitimate users through
  • Allow and Block Lists – Maintain custom lists of allowed and blocked IPs, emails, and user IDs
  • Smart Caching – Cache known good and bad IPs to improve performance and reduce API calls
  • Comprehensive Logging – Track all blocked attempts and approved submissions for review
  • Custom Login/Registration Forms – Optional custom forms with built-in spam protection
  • User Management – Identify and manage inactive or suspicious user accounts

Configuration

After installation, go to the Dam Spam settings in your WordPress admin to:

  1. Enable the protection types you need (registration, login, comments, contact forms)
  2. Choose which spam detection methods to use (IP checks, email validation, third-party APIs)
  3. Configure CAPTCHA settings if desired
  4. Set up allow and block lists for your specific needs
  5. Review logs to fine-tune your protection settings

Differences from Stop Spammers

Dam Spam is a fork of the Stop Spammers plugin with ongoing maintenance, bug fixes, and security improvements. While the core spam protection functionality remains similar, Dam Spam’s file and code structure has been significantly cleaned up and will continue to be further modernized.

Installation

Automatic

  1. Go to Plugins > Add New from your WordPress admin menu
  2. Search for “Dam Spam”
  3. Click “Install Now” and then “Activate”
  4. Go to Dam Spam > Protections to configure your spam protection settings

Manual

  1. Download the plugin ZIP file
  2. Go to Plugins > Add New > Upload Plugin
  3. Click “Choose File” and select the ZIP file
  4. Click “Install Now”
  5. Click “Activate”
  6. Configure settings under Dam Spam > Protections

Frequently Asked Questions

I’m locked out of my admin!

Don’t panic. Access your site via FTP, navigate to wp-content/plugins, and rename the “dam-spam” folder to “1dam-spam” to disable it (remove the “1” to enable again). Then you can log in and adjust your settings.

Can I use Dam Spam with Cloudflare?

Yes. But you may need to restore visitor IPs.

Can I use Dam Spam with Wordfence (and other security plugins)?

Yes. They can even complement each other. However, if you have limited hosting resources or don’t allow registration on your site, using both might be overkill.

Can I use Dam Spam with WooCommerce (and other ecommerce plugins)?

Yes. In some configurations, you may need to go to Dam Spam > Protections and toggle on “Only Check Native WordPress Forms” if you experience any issues.

Can I use Dam Spam with Akismet?

Yes. Dam Spam can check Akismet for an additional layer of protection.

Can I use Dam Spam with Jetpack?

Yes. You can use all Jetpack features except for Jetpack Protect, which conflicts with Dam Spam.

Why is 2FA failing?

Toggle off the “Check Credentials on All Login Attempts” option under Dam Spam > Protections and try again.

Will Dam Spam slow down my site?

Dam Spam uses smart caching to minimize performance impact. Known good IPs are cached and bypass most checks, while API calls are only made for suspicious submissions.

How can I test my spam protection settings?

Go to Dam Spam > Testing to run tests and see how your current settings would handle different types of submissions.

Is Dam Spam GDPR-compliant?

Yes. Dam Spam does not collect any data for marketing or tracking purposes. All IP logging is for legitimate security purposes only. All data can be deleted upon user request.

What third-party services are used and what data is sent to them?

There are several optional services you may use that involve sending data to third parties including: Google reCAPTCHA, hCaptcha, Spamhaus, Stop Forum Spam, Project Honeypot, and BotScout. You may wish to read each services’ privacy policy to see if you’re comfortable using them, but generally speaking, whenever someone for example tries to use a contact form on your website, their IP address, name, and email may be sent to these services to check against spam blocklists.

Review feed

No reviews available

Screenshots

No screenshots available

Changelog

0.6

  • Moved to WordPress.org

0.5

  • Removed country checks
  • Removed dated SolveMedia CAPTCHA
  • Improved form checking

0.4

  • Bug fixes

0.3

  • Bug fixes
  • Security improvements

0.2

  • Bug fixes

0.1