--- title: "WPForms Spam Protection for Agent Inquiry Forms" description: "Check WPForms spam settings, filtering, stored entries, and false-positive recovery. Require a received buyer or seller test inquiry before acceptance." canonical: "https://scalewithsearch.com/articles/wpforms-agent-inquiry-spam-protection" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # WPForms spam protection for your real estate website inquiries For WPForms spam, inspect the affected form's protection settings, determine what happens to flagged entries, and test a legitimate buyer or seller inquiry. Require the intended recipient to find that inquiry before accepting the repair. WPForms places these controls in the form builder under **Settings » Spam Protection and Security**. Its built-in modern protection requires JavaScript. [WPForms spam-protection guide, checked 2026.10.14](https://wpforms.com/docs/how-to-prevent-spam-in-wpforms/). Use the following brief with your website maintainer. Start with the unwanted submissions you can document. Agree on controlled tests and receiving destinations before changing anything. ## Identify the form and the unwanted pattern Record the public page, embedded form identity, installed WPForms version, license, enabled protections, and intended recipient. Keep separate rows for seller requests, buyer questions, and property inquiries when they use different forms. Describe the observed problem without guessing its cause. Is the unwanted message visible in the receiving inbox, a saved form entry, or a reported submission failure? Save sanitized examples and their dates. Ask the maintainer to record the current settings before editing them. Propose a specific change against the observed pattern. Retain the original configuration and the reason for the change. Use this proposed worksheet: | Inquiry route | What to record | | --- | --- | | Seller request | Page, form identity, existing protections, intended recipient, and example unwanted submission | | Buyer or property question | Its separate settings, submitted property context, and receiving destination | | Reported missing inquiry | Visitor's reported time, visible result, and last confirmed processing step | | Alternative contact route | Approved business email shown beside the form and the person checking it | Use contact details you control for testing. Keep real buyer and seller information out of contractor screenshots. ## Inspect built-in protection before adding a service Have the maintainer check **Enable modern anti-spam protection** on the affected form. WPForms says it is normally enabled and prevents submission when triggered. [Built-in protection documentation, checked 2026.10.14](https://wpforms.com/docs/how-to-prevent-spam-in-wpforms/). The same guide documents **Enable minimum time to submit** and an editable delay measured in seconds. A submission attempted too early prompts the visitor to wait. [Submission-timing documentation, checked 2026.10.14](https://wpforms.com/docs/how-to-prevent-spam-in-wpforms/). If timing is part of the proposed repair, request tests of normal typing, autofill, and a quick repeat attempt. Record the actual configured delay. Require a usable correction path for the approved legitimate cases. WPForms also documents Akismet, reCAPTCHA, hCaptcha, and Cloudflare Turnstile integrations, including Lite support. [Supported integrations, checked 2026.10.14](https://wpforms.com/docs/how-to-prevent-spam-in-wpforms/). Keep a working supported integration unless the evidence calls for a change. Use the [CAPTCHA comparison](/articles/compare-captcha-services-agent-inquiry-forms) when provider selection needs review. Confirm its current setup instructions before installation. ## Limit country, keyword, and email restrictions to an approved rule WPForms provides country and keyword filters under the filtering section. Country rules allow or deny selected countries. Keyword rules use a case-insensitive list, with each word or phrase on a separate line. The keyword list applies across the site's WPForms forms. [WPForms filter documentation, checked 2026.10.14](https://wpforms.com/docs/adding-spam-filters/). Before approving a country restriction, include a test case for an otherwise valid buyer or seller contacting you from abroad. Decide whether that inquiry belongs within your service scope. Avoid equating the visitor's location with the property's location. Review proposed blocked phrases against ordinary property questions. Have the maintainer identify every affected form before editing the shared list. Retest those forms after a list change. Email restrictions have a separate location: the Email field's advanced options. WPForms documents an **Allowlist / Denylist** selector and rules for individual addresses or wildcard patterns. A disallowed address produces a validation error. [Email restriction documentation, checked 2026.10.14](https://wpforms.com/docs/how-to-create-an-allowlist-denylist-for-email-addresses-in-wpforms/). Prefer a narrow rule you can explain from observed unwanted messages. Test an allowed address and the approved blocked case. Require the maintainer to document any wider exclusion before accepting it. ## Separate rejection from stored spam Where entry review is available, inspect **Store spam entries in the database** for each affected form. WPForms documents stored spam under **WPForms » Entries**, then the selected form's **Spam** view. Flagged stored entries suppress notification emails. [Spam-entry management, checked 2026.10.14](https://wpforms.com/docs/viewing-and-managing-spam-entries/). Confirm access before relying on that review procedure. WPForms' entries guide distinguishes paid entry access from its Lite backup-and-upgrade route. Do not assume a Lite installation provides this working review screen. [Entry access documentation, checked 2026.10.14](https://wpforms.com/docs/complete-guide-to-form-entries/). The newer filter guide says country-filtered submissions can be retained as spam when storage is enabled. For keyword filtering, storage accepts the flagged entry without the blocking message; disabling storage blocks it and displays the configured message. [Filter and storage behavior, checked 2026.10.14](https://wpforms.com/docs/adding-spam-filters/). The older spam-management FAQ instead describes country and keyword filters as blocking submission. Require the maintainer to resolve this documentation difference against your installed version. Test each enabled control separately. [Older FAQ](https://wpforms.com/docs/viewing-and-managing-spam-entries/), [newer filter guide](https://wpforms.com/docs/adding-spam-filters/), checked 2026.10.14. Do not assume every rejection leaves a recoverable record. Record the visible result, stored classification if any, and notification result as separate observations. ## Review a false positive before recovering it For a stored entry, WPForms displays the detecting anti-spam tool in an alert. Its **Mark as Not Spam** action restores the entry and triggers configured notification emails. Connected email-marketing actions can also run. [Recovery behavior, checked 2026.10.14](https://wpforms.com/docs/viewing-and-managing-spam-entries/). Before using that action, have the maintainer identify the configured recipients and connected actions. Check whether the recovered request permits the proposed handling. Confirm the matching inquiry arrives after recovery. Assign someone to review retained spam and investigate reported missing inquiries. WPForms documents automatic deletion of spam entries with configurable timing. Inspect that timing before setting the review schedule. [Spam-entry retention controls, checked 2026.10.14](https://wpforms.com/docs/viewing-and-managing-spam-entries/). Keep a visible approved business email beside the form as an alternative route. Test that address separately and name who checks it. Avoid publishing an unattended fallback. ## Accept the change against legitimate inquiries and the blocked case Run these proposed checks in the agreed test environment. Use labeled questions and contact details you control. Have the maintainer arrange the controlled rejection case without submitting real spam to another service. | Proposed test | Evidence to require | | --- | --- | | Normal seller inquiry | Submitted question and reply details matched by the intended recipient | | Buyer or property inquiry | Matching question and property context where the existing form collects it | | Phone, keyboard, and autofill use | Completed legitimate inquiry, observed correction behavior, and matching receipt | | Agreed filtering case | Enabled control, test input, visible result, stored status if any, and notification outcome | | Stored false-positive recovery, where supported | Detecting tool, reviewed downstream actions, restored entry, and matching receipt | | Alternative business email | Address shown on the page and a matching message found by its assigned recipient | If a legitimate submission is accepted but missing at the destination, keep delivery unresolved. Use the [WPForms notification repair guide](/articles/repair-wpforms-agent-inquiry-notifications) for that separate investigation. Save the configuration, test time, submitted content, recipient confirmation, and unresolved cases together. A passed test records that observation. It promises no future inquiry, response, or lead result. ## Review visitor data before closing the repair A form or CAPTCHA tool may process visitor data. WPForms documents entry handling and controls for additional visitor details, with differences between paid installations and Lite. [WPForms data-handling documentation, checked 2026.10.14](https://wpforms.com/docs/how-to-create-gdpr-compliant-forms/). Ask the responsible privacy reviewer to inspect the actual form, spam service, recipients, stored records, and public notice. Use the [privacy applicability guide](/articles/ccpa-applicability-agent-website) and [inquiry retention guide](/articles/website-lead-retention-schedule-agent) to prepare that review. ## Bring the spam-control findings into your website brief Send the affected pages, observed unwanted pattern, proposed restrictions, intended recipient, and test requirements through the [real estate website brief](/for/real-estate). Scale With Search's $2,000 whole website fix includes inquiry-path repair, with a test inquiry and proof of receipt at the agreed destination. [Published whole website fix scope, checked 2026.10.14](https://scalewithsearch.com/work). - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ## Related: Real estate - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```