jordanjay29 There's four tactics that flarum.org uses to combat bot spam: Akismet extension, which is made by Flarum. It requires an account with Akismet.com, and it does a good job of weeding out about 90% of the posted spam here. A few slip by, and sometimes there are a few false positives, but there are other tools for that. StopForumSpam extension by Reflar. This checks StopForumSpam.com to see if someone's username, email or IP are association with reported spammers, and can stop them from even registering. SpamBlock extension by Friends of Flarum. This enables users with permission to mark any bots or human spammers that slip by as a spammer, which sends the information to StopForumSpam.com (and will help prevent future re-registrations). It also nukes the current account, removing all posts and suspending them indefinitely. CONSTANT VIGILANCE! This is the human element, you have to be lurking out on your forum, reading the discussions as they come in to assess whether they are spam bots or not. It's tedious and gets exhausting, but even with the best algorithmic tools, there's really no substitute for human intervention. Even the biggest sites out there, from Google to Reddit to Facebook, rely on human intervention to spot and take down malicious or spam postings. But hopefully the tools above can help you mitigate the amount that you'll need to intervene so you can just enjoy your forum.
matteocontrini One thing to note is that with the Akismet extension every new post content, together with the username and email of the user, is sent to the Akismet server, so you'd better have this clearly stated in the privacy policy of your forum.