Settings

In the admin area of your site, navigate to Users > Fake User Settings.

General

• Check at Registration: Check users for suspicious activity at the time of registration.
• Recheck Cleared Users: Recheck all previously cleared users.
• Temporarily Hide Cleared Users: Temporarily hide users that are cleared during the scan so viewing the flagged list is easier. (Recommended)
• Log Each Flagged User: For developers to log each user that is flagged to the Debug Log.

What do you want to check for?

All checks are enabled by default. Some options, like "Very Short Names" and "Consonant Clusters," might occasionally mark legitimate users as suspicious, but since these traits frequently appear in spam accounts, including them and manually verifying false positives is advised.

• Excessive Uppercase Letters: Flags if there are more than 5 uppercase letters in a first or last name, only if the name is not in all caps.
• No Vowels: Flags if there are no vowels in names longer than 5 characters.
• Consonant Clusters: Flags if there are 6 or more consecutive consonants in the name.
• Numbers: Flags if names contain numeric characters.
• Special Characters: Flags if names contain characters other than letters, numbers, and dashes.
• Similar First and Last Name: Flags if the first and last name are exactly the same or one includes the other.
• Excessive Periods in Email: Flags if the email address contains more than 3 periods.
• Username Contains URL: Flags if the username contains http, https, or www.
• Known Spam Words: Flags if spam trigger words are found in user bio or name.
• Invalid Email Domain: Flags if the email domain is disposable or not registered.
• Very Short Names: Flags if the first or last name is 2 characters.

Integrations

Certain options can integrate with other plugins; if detected, these options will be displayed here. Developers can learn how to add integrations from the developer docs.

Developer Settings

• Spam Trigger Words: Enter words (separated by commas) that are commonly found in spam account names and bios. This is used for the "Known Spam Words" check.
• Additional Columns: Enter user meta keys (separated by commas) that you would like to display in the Users admin list table.
• Edit Profile Fields: Enter user meta keys (separated by commas) that you would like to edit on the Users admin profile page.

Scanning Existing Accounts

Navigate to Users > All Users.

A new column labeled "Suspicious" will appear. Users not yet scanned will show "Not Checked." Users flagged as suspicious will display their respective flags. Users marked as not suspicious will show "Cleared."

Below each username, quick action links allow you to manually "Mark Suspicious" or "Mark Not Suspicious."

To scan all users on the current page, click the "Scan for Suspicious Accounts" button at the top. This initiates a scan based on the flags selected in your Settings.

Suspicious users are highlighted, and their checkboxes are automatically selected, facilitating bulk deletion via Bulk Actions without manual selection. If a user is incorrectly flagged, manually marking them as not suspicious will remove the highlight and uncheck the box.

Pro tip: Enable "Temporarily Hide Cleared Users" in Settings to display only suspicious accounts after scanning, simplifying review and verification.