This guide will review how our system has built-in bot protection and how you can enable spam protection or bot protection on your engagement campaigns.
We offer three levels of campaign protection - all found under the Access Restrictions tab in campaign setup:
- 🔓 No Protection: Default mode. This mode is ideal for in-venue kiosks, staff-assisted entries or in-venue QR, where traffic to the campaign is controlled, and the campaign URL is not publicly known.
- 🛡️ Spam Protection (Level 1): This mode blocks obvious spammers - high-frequency entries from the same IP address will be rejected with a clear error message. If you are running an in-venue campaign, do not use spam protection.
- 🤖 Bot Protection (Level 2): This is the new full anti-bot algorithm. When you turn on this toggle, we analyze entry behaviour in real-time to block suspicious attempts, without disrupting real fans.
🛡 When Spam Protection is enabled:
- We limit entries based on cookies and IP addresses. For example, if a fan enters 60 activities in a 20-minute time frame, we prevent them from being able to submit any further.
- We limit entries where fans have entered the same first name and last name, but with a different email, more than 10 times.
Where to turn on spam-protection
You'll find Spam Protection in
Campaign Setup > Access Restrictions
In addition to the Spam Protection toggle, we also recommend using the Limit Entries section to define how frequently or how many times you want a fan to be able to enter your campaign. You can limit fan entries by Daily Limits or Lifetime Limits, and we recommend you align these entry restrictions with your terms and conditions.
🤖 When Bot Protection is enabled:
- Automated entries are quietly blocked
- Fans see a “success” screen, but behind the scenes for bots, nothing goes through
- No captchas, no clunky redirects, no giveaway tipping off the bots.
Where to turn on bot-protection
You’ll now find Bot Protection and Entry Limits under:
Campaign Setup > Access Restrictions
Pick the right level for your campaign. Add IP allowlists/whitelists if needed (they’re exempt from all protection rules).
New Bot Status Reporting
Spot a bot, stop a bot.
In addition to blocking bots, we’re also introducing a log so you can visually see how many bots were stopped and whomst these bots might be. To view, head to Results > Bot Status for a breakdown of what’s getting through, flagged or blocked.
| Status | What it Means |
| Accepted | Entry passed all checks. Looks clean. |
| Flagged | Entry went through but looks suspicious. Flagged for secondary review. |
| Blocked | Bot Protection stopped entry. "Bot" sees success screen but nothing is recorded in campaign activities. |
Real-world example
Let’s say you’re running a contest with a public link for a sponsor with major prizing. You want real fans entering from everywhere - not one IP farming your prize codes.
Turn on Bot Protection, and:
- Obvious abuse gets blocked
- Questionable traffic gets logged
- You keep control without breaking the fan experience
It’s like turning on a firewall for your campaigns.
Try it now
Bot Protection is already live - no integration, no manual setup. Just a toggle!
Still need assistance? Please reach out to your Customer Success Team or contact support@tradablebits.com