How to Limit Form Submissions in GiveWP Donation Forms?

GiveWP

GiveWP donation forms are public, which makes them targets for bots and fraud. Attackers may test stolen cards, attempt large donations, or submit repeatedly. To limit submissions, use three layers: donation amount limits, Donation Goals, and rate limiting with OOPSpam. Together, they reduce spam and abuse while keeping forms open for real donors.

1. Set Donation Amount Limits in GiveWP

Start by controlling the donation amount inside the form settings. This prevents very small card-testing amounts and unusually large fraudulent donations.

Set Donation Amount Limits in GiveWP

How to Set Minimum and Maximum Amounts

  1. Go to Donations → All Forms.
  2. Click Edit on the form.
  3. Click Donation Options in the left panel.

Under Custom Amount, make sure it is Enabled if you want donors to enter their own amount.

Scroll to Donation Limit. Set:

For example, you might set a minimum of $10 and a maximum of $5,000.

Click Update to save.

These limits apply to all payment gateways connected to the form.

How to Disable Custom Amounts

If you want full control over donation values:

  1. In Donation Options, set Custom Amount to Disabled.

Now donors must choose from preset Donation Levels (e.g., $10, $25, $50). This prevents extreme or suspicious entries.

Setting amount limits reduces financial abuse. To control repeated submissions, you will also need rate limiting.

2. Enable Donation Goal to Close Forms Automatically

Enable Donation Goal

Donation Goals allow you to automatically close a form when a target is reached. This is useful for limited campaigns and event-based fundraising.

You can configure a goal based on:

  1. A total donation amount
  2. A number of donations

Once the goal is reached, the form closes automatically.

Donation Goals are ideal for campaigns with fixed targets. They control how long a form remains open, but they do not control how frequently someone can submit it.

3. Add Rate Limiting with OOPSpam

GiveWP does not include built-in per-IP or per-email rate limits. Without rate limiting, a bot can submit your form many times within minutes.

Add Rate Limiting with OOPSpam

OOPSpam (that’s us 👋) adds this missing control. It checks submissions before GiveWP processes them and blocks repeated abuse automatically.

Step 1: Install OOPSpam

Go to Plugins → Add New. Search for OOPSpam Anti-Spam. Install and activate the plugin.

Create an account at OOPSpam.com and copy your API key.

Install OOPSpam

In WordPress, open OOPSpam → General Settings, paste the API key, and save.

Paste the API key

Your site is now connected to OOPSpam’s filtering system.

Step 2: Enable Protection for Donation Forms

In OOPSpam settings, enable spam protection for your forms so each submission is checked before it reaches GiveWP.

Enable Protection for Donation Forms

This ensures spam and abuse are filtered early.

Step 3: Turn On Rate Limiting

Open the Rate Limiting tab in OOPSpam and enable it.

Turn On Rate Limiting

You can configure:

For example, you might allow 5 submissions per IP per hour. If the limit is exceeded, that IP is temporarily blocked.

This stops rapid-fire bot activity and repeated abuse attempts.

Strengthen Protection with Advanced Filters

OOPSpam also provides additional controls that GiveWP does not include by default. You can enable:

OOPSpam also includes manual moderation tools. From the moderation tab, you can block specific email addresses, block abusive IP addresses, block common spam keywords, and allow trusted emails or IPs to bypass spam checks when needed.

Manual moderation tools

These features create layered protection. They help reduce false positives while catching more sophisticated spam behavior.

How the Three Layers Work Together

Each method addresses a different risk.

  1. Donation amount limits protect against financial abuse.
  2. Donation Goals control campaign limits and form availability.
  3. OOPSpam rate limiting protects against repeated and automated submissions.

When combined, they create a balanced and effective protection strategy for GiveWP donation forms.

Final Thoughts

Limiting form submissions in GiveWP is not complicated. You simply need the right combination of controls. With these layers in place, your GiveWP donation forms remain secure, stable, and focused on fundraising rather than fighting spam.

Spam Protection for WordPress, Zapier, Make and more.

Since our launch in 2017 we’ve been perfecting our API to be the trusted option for small businesses to enterprise— and continue to stick to our values of being the accessibility and privacy-friendly option. Give us a shot!

Try OOPSpam for free → Try our WordPress plugin for free →

✓ No credit card required ✓ Cancel anytime

Enjoy Reading This Article?

Here are some more articles you might like to read next: