Plugin Phone Validator for WPForms: protection from fake numbers

Protecting WPForms from Fake Phone Numbers in WordPress

Paid traffic to landing pages with lead capture forms often generates low-quality submissions. Users enter fake numbers like 123, 1111111, or short digit sequences. The form accepts the data, the click is paid for, but there's no real contact. This is a common issue for WPForms without additional validation.

The standard phone field only checks the format, allowing any combination of digits. Manual tweaks via functions.php work but don't scale: each new landing page requires code copying, with risks during theme updates.

Creating a Universal Phone Validator Plugin

Developed the Phone Validator for WPForms plugin, available for free in the WordPress.org repository. It intercepts WPForms submissions and applies multi-level phone number validation.

Key Validation Rules

• Number length: Customizable min/max digit values. Blocks 123 or 55.
• Repeating digits: Blocks patterns like 1111111, 9999999.
• Blacklist: List of banned numbers for manual addition.
• Country code: Filter by prefixes, e.g., only +7, +375 for CIS countries.
• IP throttling: Limit successful submissions per IP over a period, protecting against bots.
• Logging: Records all blocks to a file for analysis.

After installation, a Phone Validator section appears in the admin with settings and history. The plugin automatically connects to all phone fields in all WPForms without additional form configuration.

Benefits of Integration with WPForms

WPForms was chosen for its Form Abandonment addon, which saves partially filled forms. The plugin complements it by focusing on final validation. No need for hooks or custom fields—it works out of the box.

Logs help monitor:

• Spammer IP addresses.
• Popular fake patterns.
• Rule effectiveness.

Setup takes minutes: set parameters in the interface, save—protection is active site-wide.

Future Improvements

The current version uses global rules. Planned features:

• Input mask: Templates like +7 (___) ___-__-__ for enforced format, improving UX and pre-validation.
• Per-form rules: Different settings for forms on multi-landing sites.

Open-source code on GitHub allows contributions or forking for specific needs.

Key Points

• The plugin blocks 80–90% of fake leads without false positives on real numbers.
• Full compatibility with WPForms, including Form Abandonment.
• Logging and throttling protect against bots and farming.
• Free, with translations in English and Spanish.
• Customizable rules minimize manual moderation.

— Editorial Team