# Is anyone experiencing an odd spam user attack? Any way to block?

**URL:** https://meta.discourse.org/t/is-anyone-experiencing-an-odd-spam-user-attack-any-way-to-block/404427
**Category:** Support
**Created:** [June 3, 2026, 1:59pm UTC](https://meta.discourse.org/t/is-anyone-experiencing-an-odd-spam-user-attack-any-way-to-block/404427 "2026-06-03T13:59:07Z")
**Posts on this page:** 1
**Showing post:** 13

<div class="post-metadata">

### Author: ![Lee\_Ars](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lee_ars/32/1597_2.png) [@Lee\_Ars](https://meta.discourse.org/u/Lee_Ars)
#### Post date: [June 5, 2026, 12:27pm UTC](https://meta.discourse.org/t/is-anyone-experiencing-an-odd-spam-user-attack-any-way-to-block/404427/13 "2026-06-05T12:27:32Z")

</div>

Discourse’s official [hCaptcha plugin](https://meta.discourse.org/t/discourse-hcaptcha/291383) can be a huge help here. It’s specifically intended to help mitigate bot signups.

(I would personally also love to see [Discourse support for Cloudflare Turnstile](https://meta.discourse.org/t/how-can-i-integrate-cloudflare-turnstile-with-discourse/302821), given that Turnstile’s free tier includes a frictionless non-interactive mode, whereas similar functionality with hCaptcha requires transitioning to their “pro” pricing tier at $99/month—which is absolutely pants-on-head ludicrous for self-hosters.)

---

_[View the full topic](https://meta.discourse.org/t/is-anyone-experiencing-an-odd-spam-user-attack-any-way-to-block/404427)._