> Portal Navigation: > > - Append `.md` to any URL under `https://dev.wix.com/docs/` to get its markdown version. > - Pages are either content pages (article or reference text) or menu pages (a list of links to child pages). > - To get a menu page, truncate any URL to a parent path and append `.md` (e.g. `https://dev.wix.com/docs/sdk.md`, `https://dev.wix.com/docs/sdk/core-modules.md`). > - Top-level index of all portals: https://dev.wix.com/docs/llms.txt > - Full concatenated docs: https://dev.wix.com/docs/llms-full.txt # BulkReportSpamSubmission # Package: forms # Namespace: FormSpamSubmissionReportService # Method link: https://dev.wix.com/docs/api-reference/crm/forms/form-spam-submission-report-v4/bulk-report-spam-submission.md ## Permission Scopes: Manage form submissions.: SCOPE.FORMS.MANAGE-SUBMISSIONS Read Submissions: SCOPE.DC-FORMS.READ-SUBMISSIONS Manage Submissions: SCOPE.DC-FORMS.MANAGE-SUBMISSIONS ## Introduction Reports multiple submissions of a form as spam. For each submission, a form spam submission report is created, and the submission is deleted shortly after. Submission IDs that don't exist or that belong to another form are skipped. To report a single submission, call [Report Spam Submission](https://dev.wix.com/docs/api-reference/crm/forms/spam-submissions/report-spam-submission.md). --- ## REST API ### Schema ``` Method: bulkReportSpamSubmission Description: Reports multiple submissions of a form as spam. For each submission, a form spam submission report is created, and the submission is deleted shortly after. Submission GUIDs that don't exist or that belong to another form are skipped. To report a single submission, call [Report Spam Submission](https://dev.wix.com/docs/api-reference/crm/forms/spam-submissions/report-spam-submission.md). URL: https://www.wixapis.com/form-spam-submission-report-service/v4/bulk/submissions/report-spam-submission Method: POST # Note: If the parameter `a.b` is listed under required parameters, `b` is only required if `a` is also present. Required parameters: formId, submissionIds, reportReason Method parameters: param name: formId | type: formId | description: GUID of the form that the submissions belong to. | required: true | validation: format GUID param name: reportReason | type: ReportReason | required: true - enum: EMAIL_QUOTA_REACHED - Too many submissions with the same email address in a short time. IP_BLOCKLISTED - The submitter's IP address is blocklisted. EMAIL_BLOCKLISTED - An email address in the submission is blocklisted. AI_REPORTED - Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. MANUALLY_REPORTED - Reported as spam by a person, such as the site owner or a collaborator. MODERATION_SPI - Flagged by a spam moderation service plugin installed on the site. AI_REPORTED_LLM - Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. param name: reportReasonDescription | type: reportReasonDescription | description: Additional details about why the submission is reported as spam. | validation: minLength 1, maxLength 255 param name: returnEntity | type: returnEntity | description: Whether to return the created reports in `results.item`. Default: `false` param name: submissionIds | type: array | description: IDs of the submissions to report as spam. | required: true | validation: maxItems 100, format GUID Return type: BulkReportSpamSubmissionResponse - name: results | type: array | description: Result for each submission. | validation: minItems 1, maxItems 100 - name: itemMetadata | type: ItemMetadata | description: Metadata about the created report, such as whether the report was created. - name: id | type: string | description: Item GUID. Should always be available, unless it's impossible (for example, when failing to create an item). | validation: format GUID - name: originalIndex | type: integer | description: Index of the item within the request array. Allows for correlation between request and response items. - name: success | type: boolean | description: Whether the requested action was successful for this item. When `false`, the `error` field is populated. - name: error | type: ApplicationError | description: Details about the error in case of failure. - name: code | type: string | description: Error code. - name: description | type: string | description: Description of the error. - name: data | type: object | description: Data related to the error. - name: item | type: FormSpamSubmissionReport | description: Created form spam submission report. Returned only when `returnEntity` is `true`. - name: id | type: string | description: Form spam submission report GUID. | read-only: true | validation: format GUID - name: formId | type: string | description: GUID of the form the submission was made on. | validation: format GUID, immutable - name: namespace | type: string | description: Namespace of the app that the form belongs to. Copied from the form. Currently supports `wix.form_app.form`, the namespace of the Wix Forms app. | read-only: true | validation: minLength 10, maxLength 50 - name: submitter | type: Submitter | description: Identity of the submitter: a member, visitor, app, or user. | validation: immutable - ONE-OF: - name: memberId | type: string | description: Member GUID. | validation: format GUID - name: visitorId | type: string | description: Visitor GUID. | validation: format GUID - name: applicationId | type: string | description: Application GUID. | validation: maxLength 36 - name: userId | type: string | description: User GUID. | validation: format GUID - name: submissions | type: Map | description: Submitted values. Each key is the `target` of a form field, and each value is what the submitter entered in that field. Validated against the form's fields when the report is created. | validation: format map, immutable - ONE-OF: - name: nullValue | type: | description: - name: numberValue | type: number | description: - name: stringValue | type: string | description: - name: boolValue | type: boolean | description: - name: structValue | type: object | description: - name: listValue | type: ListValue | description: - name: values | type: array | description: - name: reportReason | type: ReportReason | description: Reason the submission was flagged as spam. | validation: immutable - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: createdDate | type: string | description: Date and time the original submission was created. When you create a report for an existing submission, specify the submission's creation date to keep it. Can't be in the future. Default: Date and time the report is created | validation: format date-time, immutable - name: reportedDate | type: string | description: Date and time the submission was reported as spam. | read-only: true | validation: format date-time - name: updatedDate | type: string | description: Date and time the form spam submission report was last updated. | read-only: true | validation: format date-time - name: revision | type: string | description: Revision number, which increments by 1 each time the form spam submission report is updated. Ignored when creating a form spam submission report. | read-only: true | validation: format int64 - name: extendedFields | type: ExtendedFields | description: Custom field data for the form spam submission report object. [Extended fields](https://dev.wix.com/docs/build-apps/develop-your-app/extensions/backend-extensions/schema-plugins/about-schema-plugin-extensions.md) must be configured in the app dashboard before they can be accessed with API calls. - name: namespaces | type: object | description: Extended field data. Each key corresponds to the namespace of the app that created the extended fields. The value of each key is structured according to the schema defined when the extended fields were configured. You can only access fields for which you have the appropriate permissions. Learn more about [extended fields](https://dev.wix.com/docs/rest/articles/getting-started/extended-fields.md). | validation: format map - name: submissionStatusAtReport | type: SubmissionStatus | description: Status of the submission when it was reported as spam. When the submission is restored as not spam, a `PENDING` status becomes `CONFIRMED`. Any other status is kept. Returned as `PENDING` when the status wasn't recorded. - enum: - PENDING: A submission is created, but has not yet been recorded in the Wix Forms collection. - CONFIRMED: A submission is recorded in the Wix Forms collection. - PAYMENT_WAITING: A form submission requiring payment is created. - PAYMENT_CANCELED: An order of a form submission is canceled. - name: orderDetails | type: OrderDetails | description: Payment details of the submission. Available only for forms with payments. - name: checkoutId | type: string | description: GUID of the checkout created for the submission. | read-only: true | validation: format GUID - name: contactId | type: string | description: GUID of the contact who submitted the form: the site member who submitted it, or the contact matched to the submitter. | read-only: true | validation: format GUID - name: accessRestriction | type: string | description: GUID of the user who is authorized to view the original submission. Copied from the submission's `accessRestriction`. When set, reading the report requires the same additional access check as reading the submission. | validation: format GUID, immutable - name: reportReasonDescription | type: string | description: Additional details about why the submission was flagged as spam. For example, the explanation returned by a spam moderation service plugin, or a note from the person who reported it. | validation: minLength 1, maxLength 255 - name: childMetaSiteId | type: string | description: GUID of the site the submission was made on. Returned only when the site shares its data with a parent site. In that case, spam submission reports from all child sites are stored on the parent site, and this field identifies which site the report came from. | read-only: true | validation: format GUID - name: bulkActionMetadata | type: BulkActionMetadata | description: Metadata about the bulk action, such as the number of successes and failures. - name: totalSuccesses | type: integer | description: Number of items that were successfully processed. - name: totalFailures | type: integer | description: Number of items that couldn't be processed. - name: undetailedFailures | type: integer | description: Number of failures without details because detailed failure threshold was exceeded. ``` ### Examples ### Report multiple submissions as spam Returns the created reports because `returnEntity` is `true`. ```curl curl -X POST \ 'https://www.wixapis.com/form-spam-submission-report-service/v4/bulk/submissions/report-spam-submission' \ -H 'Authorization: ' \ -H 'Content-Type: application/json' \ -d '{ "formId": "21bcb6c7-02b3-4ed1-b6db-7856094fac03", "submissionIds": [ "f8e2a4c6-1b3d-4f5a-9e7c-6d8b2a4c1e93", "0b6d8f1a-3c5e-4a7b-9d2f-8e4a6c1b3d57" ], "reportReason": "MANUALLY_REPORTED", "returnEntity": true }' ``` --- ## JavaScript SDK ### Schema ``` Method: wixClientAdmin.forms.formSpamSubmissionReports.bulkReportSpamSubmission(formId, options) Description: Reports multiple submissions of a form as spam. For each submission, a form spam submission report is created, and the submission is deleted shortly after. Submission GUIDs that don't exist or that belong to another form are skipped. To report a single submission, call [Report Spam Submission](https://dev.wix.com/docs/api-reference/crm/forms/spam-submissions/report-spam-submission.md). # Note: If the parameter `a.b` is listed under required parameters, `b` is only required if `a` is also present. Required parameters: formId, options.submissionIds, options.reportReason, options Method parameters: param name: formId | type: string | description: GUID of the form that the submissions belong to. | required: true | validation: format GUID param name: options | type: BulkReportSpamSubmissionOptions none | required: true - name: submissionIds | type: array | description: IDs of the submissions to report as spam. | required: true | validation: maxItems 100, format GUID - name: reportReason | type: ReportReason | description: Reason the submission is reported as spam. | required: true - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: returnEntity | type: boolean | description: Whether to return the created reports in `results.item`. Default: `false` - name: reportReasonDescription | type: string | description: Additional details about why the submission is reported as spam. | validation: minLength 1, maxLength 255 Return type: PROMISE - name: results | type: array | description: Result for each submission. | validation: minItems 1, maxItems 100 - name: itemMetadata | type: ItemMetadata | description: Metadata about the created report, such as whether the report was created. - name: _id | type: string | description: Item GUID. Should always be available, unless it's impossible (for example, when failing to create an item). | validation: format GUID - name: originalIndex | type: integer | description: Index of the item within the request array. Allows for correlation between request and response items. - name: success | type: boolean | description: Whether the requested action was successful for this item. When `false`, the `error` field is populated. - name: error | type: ApplicationError | description: Details about the error in case of failure. - name: code | type: string | description: Error code. - name: description | type: string | description: Description of the error. - name: data | type: object | description: Data related to the error. - name: item | type: FormSpamSubmissionReport | description: Created form spam submission report. Returned only when `returnEntity` is `true`. - name: _id | type: string | description: Form spam submission report GUID. | read-only: true | validation: format GUID - name: formId | type: string | description: GUID of the form the submission was made on. | validation: format GUID, immutable - name: namespace | type: string | description: Namespace of the app that the form belongs to. Copied from the form. Currently supports `wix.form_app.form`, the namespace of the Wix Forms app. | read-only: true | validation: minLength 10, maxLength 50 - name: submitter | type: Submitter | description: Identity of the submitter: a member, visitor, app, or user. | validation: immutable - ONE-OF: - name: memberId | type: string | description: Member GUID. | validation: format GUID - name: visitorId | type: string | description: Visitor GUID. | validation: format GUID - name: applicationId | type: string | description: Application GUID. | validation: maxLength 36 - name: userId | type: string | description: User GUID. | validation: format GUID - name: submissions | type: Map | description: Submitted values. Each key is the `target` of a form field, and each value is what the submitter entered in that field. Validated against the form's fields when the report is created. | validation: format map, immutable - ONE-OF: - name: nullValue | type: | description: - name: numberValue | type: number | description: - name: stringValue | type: string | description: - name: boolValue | type: boolean | description: - name: structValue | type: object | description: - name: listValue | type: ListValue | description: - name: values | type: array | description: - name: reportReason | type: ReportReason | description: Reason the submission was flagged as spam. | validation: immutable - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: _createdDate | type: Date | description: Date and time the original submission was created. When you create a report for an existing submission, specify the submission's creation date to keep it. Can't be in the future. Default: Date and time the report is created | validation: immutable - name: reportedDate | type: Date | description: Date and time the submission was reported as spam. | read-only: true - name: _updatedDate | type: Date | description: Date and time the form spam submission report was last updated. | read-only: true - name: revision | type: string | description: Revision number, which increments by 1 each time the form spam submission report is updated. Ignored when creating a form spam submission report. | read-only: true | validation: format int64 - name: extendedFields | type: ExtendedFields | description: Custom field data for the form spam submission report object. [Extended fields](https://dev.wix.com/docs/build-apps/develop-your-app/extensions/backend-extensions/schema-plugins/about-schema-plugin-extensions.md) must be configured in the app dashboard before they can be accessed with API calls. - name: namespaces | type: object | description: Extended field data. Each key corresponds to the namespace of the app that created the extended fields. The value of each key is structured according to the schema defined when the extended fields were configured. You can only access fields for which you have the appropriate permissions. Learn more about [extended fields](https://dev.wix.com/docs/rest/articles/getting-started/extended-fields.md). | validation: format map - name: submissionStatusAtReport | type: SubmissionStatus | description: Status of the submission when it was reported as spam. When the submission is restored as not spam, a `PENDING` status becomes `CONFIRMED`. Any other status is kept. Returned as `PENDING` when the status wasn't recorded. - enum: - PENDING: A submission is created, but has not yet been recorded in the Wix Forms collection. - CONFIRMED: A submission is recorded in the Wix Forms collection. - PAYMENT_WAITING: A form submission requiring payment is created. - PAYMENT_CANCELED: An order of a form submission is canceled. - name: orderDetails | type: OrderDetails | description: Payment details of the submission. Available only for forms with payments. - name: checkoutId | type: string | description: GUID of the checkout created for the submission. | read-only: true | validation: format GUID - name: contactId | type: string | description: GUID of the contact who submitted the form: the site member who submitted it, or the contact matched to the submitter. | read-only: true | validation: format GUID - name: accessRestriction | type: string | description: GUID of the user who is authorized to view the original submission. Copied from the submission's `accessRestriction`. When set, reading the report requires the same additional access check as reading the submission. | validation: format GUID, immutable - name: reportReasonDescription | type: string | description: Additional details about why the submission was flagged as spam. For example, the explanation returned by a spam moderation service plugin, or a note from the person who reported it. | validation: minLength 1, maxLength 255 - name: childMetaSiteId | type: string | description: GUID of the site the submission was made on. Returned only when the site shares its data with a parent site. In that case, spam submission reports from all child sites are stored on the parent site, and this field identifies which site the report came from. | read-only: true | validation: format GUID - name: bulkActionMetadata | type: BulkActionMetadata | description: Metadata about the bulk action, such as the number of successes and failures. - name: totalSuccesses | type: integer | description: Number of items that were successfully processed. - name: totalFailures | type: integer | description: Number of items that couldn't be processed. - name: undetailedFailures | type: integer | description: Number of failures without details because detailed failure threshold was exceeded. ``` ### Examples ### Report multiple submissions as spam Returns the created reports because `returnEntity` is `true`. ```javascript import { formSpamSubmissionReports } from "@wix/forms"; async function bulkReportSpamSubmission() { const response = await formSpamSubmissionReports.bulkReportSpamSubmission( "21bcb6c7-02b3-4ed1-b6db-7856094fac03", { submissionIds: [ "f8e2a4c6-1b3d-4f5a-9e7c-6d8b2a4c1e93", "0b6d8f1a-3c5e-4a7b-9d2f-8e4a6c1b3d57" ], reportReason: "MANUALLY_REPORTED", returnEntity: true }, ); } /* Promise resolves to: * { * "results": [ * { * "itemMetadata": { * "_id": "a7c3e2f1-5b8d-4e9a-9c1f-3d2e4b6a8f10", * "originalIndex": 0, * "success": true * }, * "item": { * "_id": "a7c3e2f1-5b8d-4e9a-9c1f-3d2e4b6a8f10", * "formId": "21bcb6c7-02b3-4ed1-b6db-7856094fac03", * "namespace": "wix.form_app.form", * "submitter": { * "visitorId": "9a3f5c7e-2d4b-4e6a-8c1f-5b7d9e2a4c68" * }, * "submissions": { * "first_name_e7a1": "Alex", * "email_3c9f": "alex.morgan@example.com", * "long_answer_b42d": "Buy cheap followers now at bit.ly/xyz" * }, * "reportReason": "MANUALLY_REPORTED", * "_createdDate": "2026-10-12T09:14:31.512Z", * "reportedDate": "2026-10-12T09:14:32.104Z", * "_updatedDate": "2026-10-12T09:14:32.104Z", * "revision": "1", * "submissionStatusAtReport": "CONFIRMED", * "contactId": "3b5d7f9a-1c2e-4b4d-9f6a-8c1e3a5b7d02" * } * }, * { * "itemMetadata": { * "_id": "c4d9f6b2-7a1e-4c3b-8f5d-2e9a7b1c6d42", * "originalIndex": 1, * "success": true * }, * "item": { * "_id": "c4d9f6b2-7a1e-4c3b-8f5d-2e9a7b1c6d42", * "formId": "21bcb6c7-02b3-4ed1-b6db-7856094fac03", * "namespace": "wix.form_app.form", * "submitter": { * "visitorId": "9a3f5c7e-2d4b-4e6a-8c1f-5b7d9e2a4c68" * }, * "submissions": { * "first_name_e7a1": "Sam", * "email_3c9f": "promo@example.net", * "long_answer_b42d": "Limited offer, click here" * }, * "reportReason": "MANUALLY_REPORTED", * "_createdDate": "2026-10-12T10:41:08.220Z", * "reportedDate": "2026-10-12T09:14:32.104Z", * "_updatedDate": "2026-10-12T09:14:32.104Z", * "revision": "1", * "submissionStatusAtReport": "CONFIRMED", * "contactId": "3b5d7f9a-1c2e-4b4d-9f6a-8c1e3a5b7d02" * } * } * ], * "bulkActionMetadata": { * "totalSuccesses": 2, * "totalFailures": 0, * "undetailedFailures": 0 * } * } */ ``` ### bulkReportSpamSubmission (self-hosted) Self-hosted SDK calls require you to [create a client](https://dev.wix.com/docs/sdk/articles/work-with-the-sdk/about-the-wix-client.md). ```javascript import { createClient } from '@wix/sdk'; import { formSpamSubmissionReports } from '@wix/forms'; // Import the auth strategy for the relevant access type // Import the relevant host module if needed const myWixClient = createClient ({ modules: { formSpamSubmissionReports }, // Include the auth strategy and host as relevant }); async function bulkReportSpamSubmission(formId,options) { const response = await myWixClient.formSpamSubmissionReports.bulkReportSpamSubmission(formId,options); }; ``` ---