Blocking emails & domains

As well as blocking words, Blocklist for Forms can reject submissions based on the sender’s email address or domain. This is handy when the same address or domain keeps sending spam, regardless of the message content.

Blocking a specific email address

Add a full email address, such as [email protected], to the blocked list. Any submission whose email field matches that address is rejected.

1. Go to Settings → Blocklist for Forms.
2. In the blocked emails/domains list, add the address on its own line.
3. Save your changes.

Blocking a whole domain

Add just the domain, such as example.com, to block every address at that domain — including subdomains. So blocking example.com also rejects mail.example.com and [email protected].

1. Go to Settings → Blocklist for Forms.
2. Add the domain on its own line (without an @).
3. Save your changes.

Blocking domains is powerful

Blocking a domain rejects all submissions from it, including subdomains. Avoid blocking large shared providers (for example gmail.com) unless you’re certain, as this will block many legitimate visitors.

Which forms this applies to

Email and domain blocking applies to forms that include an email field. It’s the primary protection for the WooCommerce checkout, where Blocklist for Forms blocks by email address and domain (and also checks order notes against your disallowed words).

Make sure the relevant form plugin is enabled on the configuration screen for these checks to run.

Combining with word blocking

Email/domain blocking and word blocking work together. A submission is rejected if it matches either a blocked word or a blocked email/domain, giving you layered protection.