Since joining the Web Analytics World team I’ve had the opportunity to work on a number of different websites, from existing ones getting a revamp to brand new start ups and websites with forums attached. I’ve been a member of forums in the past but this year has seen me join the admin team on a forum and it’s been a steep but most excellent and enjoyable learning curve.

Forums, or any online community or message board, allows like-minded, or even opposing, individuals who have a shared interest to: discuss and share information related to that interest, gain solutions to problems from those with differing experiences, alert each other to breaking news and join in on off-topic chat.

As we looked at in last month’s post on comment spam, if you allow web visitors to enter information that can be seen by others or indexed by search engines, you will unfortunately gain your share of spammers. Forums provide more than the opportunity to post just a single comment:

• forum members have profile fields (signatures, home pages)
• members can post multiple times
• members can create image albums, groups
• members are able to send private messages to other members.

The spammer or spambot will register as a new forum member and may then:

1. never complete the registration – you’ll see them as “users awaiting email confirmation”
2. leave the account dormant
3. not include any spam links and in fact start to post non-spammy content
4. include a hyperlink or links in one of the profile fields and perhaps post spammy or non spammy content. 

Dormant accounts can be left as they are for months with no spam links and then, perhaps when it’s anticipated that the forum moderators and admin’s attentions will have moved onto newer members, the account is edited to include links. 

Spammers posting non spammy content can, once they’ve built up their posts, then edit their profile to include spam links in the signature (which is then displayed against each of their posts).

This is just a few examples of spam activity but the aim is the same as with comment spam; to increase the linked site’s search engine rank or gain visitors by enticing the forum’s members to click on the links provided.

Don’t waste your time and don’t take it personally

No one wants a perfectly spam free forum if it means that you as the admin or moderator have to spend all your time reviewing every post or new member. Perhaps it may be feasible if you have a small forum, but what about one with over 5,000 members, 20,000 threads and 600, 000 posts? The good news is that there are steps you can take to reduce the level of spammers that post spam, or include profile spam, without spending hours on reviewing profiles and posts.

The majority of the time the spammers are hitting your forum because the member page is in essence a form – a place where they can enter spam. I’ve seen very specialised communities get hit with spammers and bots, who then become non-completes or non active members as they can’t easily post or include spam links on their membership fields.

Where to spend your time

1. Settings – use your forum’s admin settings against spam 
• Check out how you are getting users to register as new members. Make full use of captcha and questions designed to catch out spam bots, recently I’ve seen CAPTCHAs where the user has to turn a picture the correct way up, or click and drag the image of a cat out of four random images into a circle. Remember to think to about accessibility if you are using CAPTCHA and provide an alternative interface for users who cannot see the screen.
• Look at the user permissions e.g. not allowing new members to have access to their signature field or putting new users first posts into auto moderation until they have achieved a set number that have passed and been published
2. User search – this is so simple, I couldn’t believe I hadn’t thought about it earlier! Rather than keeping a manual list of potential spammers, I just run a weekly check on active accounts, sorted in ascended order by number of posts and can scan it quickly for those accounts now featuring signature and home page spam links.
3. Plug-ins – I have seen a huge reduction in my admin time by the use of StopForumSpam and GlowHost’s Spam-O-Matic. As the first line of defence they make for excellent gatekeepers and the StopForumSpam forum provides first rate advice and support. As a new forum admin it is understandable that I am all sparkly-eyed and enthusiastic about new shiny helpful tools but even our Technical expert/legend has been impressed at their effectiveness.
4. The Community – your members are against spam too, so encourage users to flag posts that are spammy or alert you if they are receiving spam private messages from other forum members.
5. Moderators – Use your Forum Moderators to act on reports of spam by members and to take action when they spot spammer activity themselves.

Final thoughts

My tactics have improved as I’ve got more knowledgeable about forum spam and I’m sure they will have evolved/changed by this time next year but there are two valuable lessons which I don’t see changing:

1. Trust my instinct – I’ve spent all my life working with people, and even though I’m just reading posts…the user behaviour which doesn’t sit right, results in a spammer identification over 90% of the time.
2. I’m human – I won’t ever get the forum 100% free from spam and I will make a very occasional mistake. It’s not a disaster if I ban someone who shouldn’t be – bans can be lifted. So I just have to ensure that members have another route to reach our admin team e.g. via contact form.

We may alter our tactics in the future but so far we’re happy with how it’s working. How about you? – We’re keen to hear about your experience with forum spam and any hints or tips that you can share with our readers.

Spam – don’t let it damage your website’s health. In the beginning, emails were the main carrier however as soon as internet users were allowed to contribute comments (do sites still use guestbooks?) businesses potentially fell victims to “comment spam”. Whether you run a blog, forum or even Facebook page; if you allow user comments and hyperlinks you will almost certainly have received comment spam.  And for a variety of reasons this should not be ignored.

The spammer, or spambot, includes hyperlink in the comment with the aim of increasing the linked site’s search engine rank or gaining visitors by internet users clicking on the link (although we have also had spam comments where the spammer has included no link and just the name of their company or product that is being “promoted”). The comments tend to be positive in nature and praising the quality of our writing, but they are just being nice to improve the chance that we’ll publish it and their link.

The way that Web Analytics World works doesn’t allow for profile spam (not posting but creating a user profile which features a link to the site) but we do get our share of comment spam. I’ve grouped it into three types:

• Single post – the most common one for us
• Multiple –  adds comments against a range of blog posts all pointing to a single site, or more often linking to all manner of sites from car maintenance to concert tickets
• Serial – hadn’t seen this one a lot on Web Analytics World until early summer when a spammer/bot decided that our readers would really appreciate links to gaining false identification documents! ….and now the same comment regularly appears in our spam catcher. 

I’m surprised that spam comments still happen, given the advances in technology on sites and search engines. What’s even more surprising is that some businesses actually pay for this “service”! On occasion the companies are unaware that their internet marketer has included comment spamming under the activity of improving traffic. There are others that see this as a valid tactic so if you allow user comments you should have a plan for handling spammers.

Approaches to spam comments

1. You shall not pass! – Not allowing any comments is a drastic step to take and it cuts out the opportunity for user interaction however this can be a suitable approach for older posts or if you provide a discussion area on your site and it will reduce the time you spend on moderation.
2. Everything in moderation – Manually  approving comments before they are published on your site and spot checking older comments (when you allow users to log in and edit what they’ve written) are all time intensive but do help to protect the integrity of your site.
3. “There’s an app for that” – User registration, CAPTCHA anti-spam plug ins, no-follow links, blacklisting IPs, URLs or keywords, auto-moderation on comments with 2 or more links. Isn’t technology great? Just be sure to monitor your comments once you’ve activated any automated tools as you may find the number of valid comments drops through false positives or an unfriendly/time consuming posting process.

What do we do?

At Web Analytics World we use a mixed approach with human moderation and technology. We use Askimet to catch comment and trackback spam and all comments are approved by the team before they are published on the site. The downside on this is that comments don’t instantly appear, but if it is a genuine and valid comment it will be published.

We may alter our tactic in the future but so far we’re happy with how it’s working. How about you? – We’re keen to hear about your experience with comment spam and any hints or tips that you can share with our readers.