Developer builds free WordPress plugin to block scam bots that slip past CAPTCHA

A WordPress community administrator noticed that spam and scam accounts were bypassing CAPTCHA by completing registration normally and only exhibiting suspicious behaviour afterward. These accounts sent private messages to members promoting dating scams or cryptocurrency schemes, often attempting to move conversations to external platforms like Telegram. The administrator found that standard rate-limiting tools were insufficient, as bots would simply wait out message intervals or alternate between targets. To address this gap, he developed a multi-signal detection system analysing factors such as account age, duplicate messages, embedded contact details, and signs of automation. The resulting free, open-source WordPress plugin, Anti-Spam Guard for Better Messages, is now publicly available and targets scam activity at the messaging layer rather than at registration.