Unwanted visitors — and automated bots — can sometimes flood your chat with spam messages. Smartsupp gives you tools to block them, and a few extra measures on your website will stop most automated traffic before it even reaches the chat. This article summarizes what we recommend.
We've broken the article into a few sections:
Block spammers in Smartsupp
The quickest way to deal with a human spammer is to block them — the chat box then disappears for that visitor. You can block a visitor directly from the conversation or from the Visitors tab in your Dashboard. Find the detailed steps in the Block visitor article.
If the spam keeps coming from the same address, block the IP address itself in Settings → Security and privacy → Blocked IP addresses → Add IP address. Use an asterisk (*) to block a whole range of IP addresses — for example 192.168.0.*.
💡 Tip: Block both the visitor and their IP address. Spammers may switch VPNs or IP addresses — if the spam continues, combine blocking with the website-level protection described below.
Restrict the chat to your own domains
You can restrict the chat so it only loads on the domains you list in Settings > Security and privacy > Allowed domains. If the list is empty, your chat code can technically be loaded on any website.
Enter domains only, without the protocol or path — for example website.com or *.website.com. You’ll find the details in the Domain whitelist article.
Note: The domain whitelist also prevents your chat code from being misused on websites that don’t belong to you.
Protect your website against bots
Automated bots often rotate VPNs and IP addresses, so blocking them one by one isn’t enough. Smartsupp can’t automatically stop spam coming from many different IP addresses at once — this kind of traffic needs to be stopped at the website level, before it reaches the chat. Here’s what we recommend:
Add a verification tool such as Google reCAPTCHA to your website — it filters out most automated traffic.
Consider a firewall or bot-protection service (for example Cloudflare) that blocks suspicious traffic before it reaches your pages.
Keep your website up to date — your CMS, plugins, and any custom code.
Watch for suspicious patterns in the Visitors tab and block repeat offenders early.
Note: Smartsupp doesn’t include a built-in CAPTCHA. Verification tools like reCAPTCHA run on your website itself and stop bots before they can open the chat.
What's next?
Block visitor — block a visitor or an IP address step by step.
Domain whitelist — restrict the chat to your own domains.
Visitors — see who’s on your website in real time.
💡 Need more help? Contact our support team — we're happy to assist!