Akismet + Gravity Forms Integration

Overview

WordPress's default spam protection — typically reCAPTCHA v3 — is largely ineffective against modern spam bots. Akismet, combined with its Gravity Forms add-on, provides industrial-grade spam filtering that blocks approximately 90% of form submissions from bots and known spam sources. This is a standard tool Asymmetric deploys on managed WordPress sites.

Why reCAPTCHA v3 Falls Short

reCAPTCHA v3 is an invisible CAPTCHA that attempts to fingerprint the visitor's browser to determine if they're human. In practice, it doesn't work particularly well against modern bots. Earlier versions (v1/v2) — the "click all the bicycles" or "I'm not a robot" checkbox variants — are more effective but create friction for real users. Akismet sidesteps this tradeoff entirely by filtering at the submission level rather than the interaction level.

From the field: A client (Tracti) was receiving a high volume of spam through their Gravity Forms contact form despite having reCAPTCHA v3 active. Their third-party agency (Liontree) had flagged the issue but misattributed the source. Akismet was installed and connected to Gravity Forms during a single working session and was expected to resolve ~90% of the problem immediately.

Installation Steps

1. Install the Akismet Plugin

• Install Akismet Anti-Spam from the WordPress plugin directory
• Activate using Asymmetric's paid Akismet license (covers client sites under the agency plan)
• No per-client cost — the license is shared across managed sites

2. Connect Akismet to Gravity Forms

• In the WordPress admin, navigate to Forms → Settings → Akismet
• Enable the Akismet add-on for Gravity Forms
• This applies Akismet filtering to all form submissions site-wide

3. Verify Activation

• After activation, go to Settings → Akismet in the WordPress dashboard
• The panel will begin showing blocked spam counts as traffic comes in
• Data populates in real time — no delay before protection is active

How It Works

Akismet checks each form submission against its global spam database (built from millions of sites). Submissions that match known spam patterns are flagged or blocked automatically. Over time, the filter also learns from manual spam markings made by the site owner.

Client Training: Weekly Entry Review

Akismet improves with feedback. Clients should be advised to review Gravity Forms entries once per week to:

1. Mark spam entries as spam — this trains the filter and improves future accuracy
2. Catch legitimate leads — especially important if the site is using PHP mail (see ^[1]), since form notification emails may not be delivered reliably

Walk clients through: Forms → [Form Name] → Entries, then scroll through and use the "Mark as Spam" action on anything that looks like bot or solicitation traffic.

What Spam Looks Like in Entries

• Repetitive, vague messages: "I need info," "I need more info," "need info on your products"
• Submissions from generic company names like "IT Consulting Group" offering services
• Solicitations (marketing agencies, financing offers) — these are human-submitted but still unwanted

Relationship to Other Spam Vectors

Akismet addresses form spam only. Other spam sources require separate solutions:

• Call spam from ads → ^[2] (ClickCease + CallRail IVR screening)
• Email deliverability → ^[1] (WP Mail SMTP Pro + SMTP.com)
• General site security → Wordfence is commonly found on unmanaged sites but is considered a blunt instrument; it can block legitimate traffic and is not preferred on Asymmetric-managed sites

Expected Outcome

• ~90% reduction in form spam immediately after activation
• Remaining spam volume decreases further as the filter learns from manual markings
• Legitimate leads are preserved in the Gravity Forms entry log regardless of email deliverability issues

Notes

• Akismet is included in Asymmetric's standard WordPress management stack alongside ^[3] and ^[4]
• Sites not managed by Asymmetric (e.g., managed by a separate web agency) may have outdated plugins and no Akismet — this is a common gap when taking over spam remediation for a client