Title: Website Generating Spam
Last modified: February 17, 2023

---

# Website Generating Spam

 *  Resolved [clrcrperry](https://wordpress.org/support/users/clrcrperry/)
 * (@clrcrperry)
 * [3 years, 3 months ago](https://wordpress.org/support/topic/website-generating-spam/)
 * I set up WP Mail SMTP yesterday using Gmail as the mailer. As soon as it was 
   activated, I started receiving spam through the plugin, all with a subject of“
   New Message From [Website name].” I’m not seeing any forms or other source for
   these messages, nor am I seeing any spam filters or other tools within the plugin.
   Is there a way to ascertain how the emails are getting posted?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Support [Dake](https://wordpress.org/support/users/dakeg/)
 * (@dakeg)
 * [3 years, 3 months ago](https://wordpress.org/support/topic/website-generating-spam/#post-16481853)
 * Hi [@clrcrperry](https://wordpress.org/support/users/clrcrperry/)
 * Thank you for reaching out to us.
 * We’re sorry to hear that you are receiving spam emails from your website, but
   please note that WP Mail SMTP doesn’t initiate email sending, we allow you to
   authenticate emails being sent from your website by integrating with one of the
   mailer services provided.
 * Since your website is now able to send emails successfully, it appears that you
   may have been targeted by spambots.
 * The ideal means of stopping spam emails from being sent from your website is 
   to enable some form of Captcha system on your contact and registration forms.
 * Depending on the contact/registration plugin you are using they may have a recommended
   captcha method, just know that we highly recommend enabling it as soon as possible.
 * We do not have access to your website, so unfortunately we cannot specifically
   recommend where these messages are coming from. The main things that come to 
   mind are any pages with a contact form, registration form or comments section.
 *  [hvorrath](https://wordpress.org/support/users/hvorrath/)
 * (@hvorrath)
 * [2 years, 11 months ago](https://wordpress.org/support/topic/website-generating-spam/#post-16830209)
 * I am having the same problem with spam emails. I use WP Forms and WP Mail SMTP
   and I’m getting the same kind of spam.
 * It has my admin email as both sending and receiving address, and a subject line“
   New message from &quot;Continuo&quot;”. (Continuo is the sending name in WP Mail
   SMTP) The body of the email is includes a name, an email address and a free form
   message. This varies in content but is generally some kind of offer to provide
   website or social media services. None of my forms has that format.
 * I don’t have a general contact or registration form on the site, nor do any posts
   have comments enabled. The special purpose forms I use all have different subject
   lines relating to the form, and they use hCaptcha. If a bot is filling in the
   form, how would they give the notification email a different subject line, and
   a format for the body that is quite different from any of my forms?
 *  Plugin Support [Dake](https://wordpress.org/support/users/dakeg/)
 * (@dakeg)
 * [2 years, 11 months ago](https://wordpress.org/support/topic/website-generating-spam/#post-16840550)
 * Hi [@hvorrath](https://wordpress.org/support/users/hvorrath/)
 * That certainly is strange. We would really recommend creating your own support
   thread ([https://wordpress.org/support/plugin/wp-mail-smtp/](https://wordpress.org/support/plugin/wp-mail-smtp/))
   so that we can investigate this issue.
 * Based on your description there are no forms that have the capabilities of the
   spam emails you are receiving.
 * In the meantime, we would recommend using a plugin like WP Mail Logging ([https://wordpress.org/plugins/wp-mail-logging/](https://wordpress.org/plugins/wp-mail-logging/))
   to confirm that those emails are being sent from your website. WP Mail Logging
   will log all send attempts form your website, so if you can find the spam email
   in your logs then it’s definitely being sent from a form on your website, if 
   they don’t appear in your logs, then it’s likely unrelated to that particular
   WordPress installation.
 * Please follow up in your own support thread and not this one okay.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Website Generating Spam’ is closed to new replies.

 * ![](https://ps.w.org/wp-mail-smtp/assets/icon-256x256.png?rev=1755440)
 * [WP Mail SMTP by WPForms - The Most Popular SMTP and Email Log Plugin](https://wordpress.org/plugins/wp-mail-smtp/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-mail-smtp/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-mail-smtp/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-mail-smtp/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-mail-smtp/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-mail-smtp/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [Dake](https://wordpress.org/support/users/dakeg/)
 * Last activity: [2 years, 11 months ago](https://wordpress.org/support/topic/website-generating-spam/#post-16840550)
 * Status: resolved