My account has received thousands of tickets coming from our chat widget. How can I stop this spam attack?
If you are being spammed, it's a good idea to check the IP address of each request, and to temporarily disable the offline chat form.
Check if the spammer is using the same IP address for every request
If the spammer is using the same IP address for every request, you can ban it (see Banning visitors). You may want to consider banning the country of origin if your company doesn't have real customers contacting you from there (see Restricting the Chat widget by country or domain).
Temporarily disable the offline chat form (or widget as a whole)
Disabling the offline form altogether or the widget as a whole is the most disruptive to your workflow. However, hiding or disabling your Chat widget for a short time (5–10 minutes) is usually enough to interrupt the attack.
To disable the offline chat form, within chat, go to Settings > Widget > Forms and tick offline form to Off. Take a moment to read Managing Offline Form settings.
Under Settings, you can also hide the chat widget until it is configured to appear by a trigger or the API.
- Select Settings > Widget.
- Click the Settings tab.
- In the Hide Widget section, make sure the Turn off Chat Widget check box is not selected.
- If you've unchecked the box, click Save Changes.
Alternatively, if you have the widget embed in your Help Center, you can remove the entire integration under Guide Admin > Settings > Integrations. Unselect the Chat option to make the entire integration disappear. For more information, see Enabling Chat for your Help Center.
For information about cleaning up any spammy tickets that may have resulted, see How can I bulk delete spam tickets in Zendesk?.