Description
RegiVigil – Spam & Fake Account Protection helps protect WordPress and WooCommerce registration forms from automated spam and fake accounts without sending registration data to an external anti-spam service.
Registration checks include:
- Hidden honeypot field
- Minimum form completion time
- Per-IP registration rate limiting
- Disposable email domain detection
- Email-domain DNS checks
- Suspicious username and email-pattern signals
- Configurable spam score
- Test mode before blocking goes live
- WordPress and WooCommerce registration support
Existing-user tools include:
- Manual and scheduled scans
- Suspicious, review, unremarkable and safe classifications
- Scan filters and pagination
- Individual rescans
- Manual safe marking
- Email, domain and IP whitelist
- Dashboard statistics
- Registration event log
- Optional automatic scan email reports
Privacy features include IP anonymization by default, configurable log retention, WordPress privacy-policy suggested text, and personal-data exporter and eraser integrations.
RegiVigil – Spam & Fake Account Protection never automatically deletes WordPress users.
Privacy
RegiVigil – Spam & Fake Account Protection may store registration event information including email address, username, spam score, detection reasons, source, timestamp and an anonymized or full IP address depending on settings. The default is IP anonymization. Log retention is configurable.
No registration data is transmitted to an external anti-spam service. Optional scan reports are sent only when enabled by an administrator and only to the configured email address.
The plugin registers suggested privacy-policy content and integrates with the WordPress personal-data exporter and eraser tools.
Installation
- Upload the plugin ZIP using Plugins > Add New > Upload Plugin.
- Activate RegiVigil – Spam & Fake Account Protection.
- Open RegiVigil – Spam & Fake Account Protection in the WordPress admin menu.
- Review Settings & Whitelist.
- Test mode is enabled by default. Review registration logs before disabling it.
- Disable test mode after you have verified that registrations are blocked correctly.
- Enjoy your spam-free website/shop.
FAQ
-
Does this require WooCommerce?
-
No. Native WordPress registration is supported. When WooCommerce is active, WooCommerce account registration is protected as well.
-
Does the plugin send registration data to an external anti-spam service?
-
No. Detection is performed locally. Optional scan reports are sent only through the WordPress mail system to the administrator-configured recipient address.
-
Does the scanner delete suspicious users?
-
No. Existing users are scored and classified only. Deletion is never automatic.
-
How does the honeypot work?
-
The plugin adds an invisible form field to supported registration forms. Normal users do not fill it in, while many automated bots do. Filling the field adds a strong spam signal to the registration score.
-
Why might a scheduled scan run later than expected?
-
The plugin uses WP-Cron. WordPress checks scheduled tasks when the site receives requests, so execution time can vary on low-traffic sites.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“RegiVigil – Spam & Fake Account Protection” is open source software. The following people have contributed to this plugin.
Contributors
Translate “RegiVigil – Spam & Fake Account Protection” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.0.0
- Added WordPress.org submission hardening based on Plugin Check findings.
- Added nonce validation for plugin-owned registration fields.
- Improved request sanitization and admin input handling.
- Added centralized IP anonymization for plugin and WooCommerce logs.
- Replaced repeated user-meta filtering/count queries with a non-autoloaded scan result index.
- Improved translator comments and internationalization compliance.
- Removed production error_log fallback.
- Retained whitelists, scan filters, statistics, scheduled scans and optional email reports.
- Added standard Author URI metadata and updated public release metadata.