WordPress spam protection plugin
Stop WordPress spam without a CAPTCHA
The oopspam Anti-Spam plugin blocks form spam, fake sign-ups, comment spam and WooCommerce card testing in the background. No puzzles for your visitors, and no logs on our servers by default.
Privacy by design- No credit card required
- Works with 40+ form plugins
Join the millions of websites
already using oopspam.
3.5M+
Protected Websites
1B+
Caught Spam
350M+
Emails & IPs in our Blocklist
24/7
Human Support
No missed opportunities
" It’s eliminated all spam, and even the need for Captcha."
by @gotmick
Protect as many websites as you want, at no extra cost
" Pricing is perfect for agencies as they do tiers by actual # of API calls and no limit on the number of sites you can install this on. Most competitors we were looking at had per-site license structures that were not going to work for us. "
by @squarecandy
Lightweight, privacy and accessibility friendly
"... I’m very happy with the usable data and tools provided to me. It’s eliminated all spam, and even the need for Captcha. I like being able to solve my own problems, and I’ve learned a lot about spam control since installing this! "
by @gotmick
Keep logs wherever you like
Would you like to see all your websites' logs in a centralized place? Enable the
Log submissions to oopspam setting in the plugin settings and monitor logs in the oopspam dashboard.
Packed with features
- Block or allow by country
- Block by language
- Do not analyze IP addresses
- Do not analyze Email addresses
- Remove sensitive information from messages ... and more
" With oopspam you get just the options you need, no more, no less. "
by @adkoen
...and if you need us, we are here for you 24/7
" .. any time I have any sort of issue, the response time from the oops team is immediate and they always fix the problem or answer my questions. "
by @winter1
Simple, transparent pricing.
1 API call = 1 spam check.
Start with 40 free checks a month, no credit card required.
WordPress spam guides
Best Anti-Spam Plugins for WordPress in 2026
Honeypot Spam Protection for WordPress: How It Works and When It Fails
Why Legitimate Form Submissions Get Flagged as Spam
So, you're using oopspam and still getting spam?
Setting up a specific form plugin? See Contact Form 7, Gravity Forms, Ninja Forms and WooCommerce.
Frequently Asked Questions (FAQ)
How many API calls do I need? 🤔
1 API call = 1 spam check
When someone submits a form on your website, that counts as one API call. For example:
- The Freelance plan (100,000 API calls) typically covers ~100 websites
- Average website gets 20-50 form submissions daily
- WordPress users: count your monthly form submissions across all sites
Does the oopspam WordPress plugin support the Form Builder plugin I use?
It supports most of the popular contact form builders. See the full list.
How do I configure the oopspam WordPress plugin?
Check out the Configuration page on the knowledge base. If something isn't working as expected, see Troubleshooting.
Is the oopspam WordPress plugin free?
The plugin is free to install from WordPress.org. It needs an oopspam API key, and every account includes 40 free spam checks a month. Paid plans are priced by number of checks, not by number of sites.
Will it slow down my website?
No. Checks run on your server when a form is submitted, so nothing extra loads in your visitors' browsers and there is no CAPTCHA script on your pages.
Does it protect WooCommerce, logins and registrations?
Yes. Besides contact forms and comments, it protects WordPress login, registration and lost-password forms, WooCommerce orders and registrations, and membership plugins. In WooCommerce it also helps stop card testing on checkout.
Is it GDPR compliant? Where are submissions stored?
Logs are kept in your own WordPress database, and nothing is stored on oopspam's servers unless you turn on remote logging. You can stop IP and email checks and strip sensitive details from messages in the Privacy settings. See our GDPR notice and Data Processing Agreement.
What if a real message is blocked?
Find it in the plugin's spam entries log, which shows why it was blocked. Add the sender's email or IP to your allowed lists, or lower the sensitivity level.
Can I keep reCAPTCHA or a honeypot?
Yes. oopspam works alongside them. If you remove reCAPTCHA, your pages no longer load Google's script.
Automate your spam and fraud detection with oopspam.
Contact us
Need to know more? Don't hesitate to contact us.
