How can I stop a spam attack coming from my contact form?

Note: If the spam is coming from your Chat widget, see the article: How can I stop a spam attack coming from the Chat widget? If the spam is coming in via web service, see the article: How can I combat spam submitted via web service?

Question

There were more than 1000 spam tickets submitted from different addresses through the web form. How do I make it stop?

Answer 

Firstly, it is important to make sure the tickets are actually coming from your contact form. To do that, you can check the events of the ticket.

To view ticket events

1. In a ticket, click Conversations under the active comment area, then select Events.

   

2. If a ticket is submitted through a channel other than the web form, such as Twitter or email, details about the channel appear. Therefore, you are looking for something like this:

Once you are assured the tickets come from your web form, you can enable the Require CAPTCHA setting. For instructions on how to enable Require CAPTCHA, see the article: Managing end-user settings.

If your MorgWard account has been spammed and you suddenly need to bulk delete these spam tickets, instead of manually deleting them, there are different ways to do it and they are all outlined in this article: How can I bulk delete spam tickets in MorgWard?