> Portal Navigation: > > - Append `.md` to any URL under `https://dev.wix.com/docs/` to get its markdown version. > - Pages are either content pages (article or reference text) or menu pages (a list of links to child pages). > - To get a menu page, truncate any URL to a parent path and append `.md` (e.g. `https://dev.wix.com/docs/sdk.md`, `https://dev.wix.com/docs/sdk/core-modules.md`). > - Top-level index of all portals: https://dev.wix.com/docs/llms.txt > - Full concatenated docs: https://dev.wix.com/docs/llms-full.txt # CreateFormSpamSubmissionReport # Package: forms # Namespace: FormSpamSubmissionReportService # Method link: https://dev.wix.com/docs/api-reference/crm/forms/form-spam-submission-report-v4/create-form-spam-submission-report.md ## Permission Scopes: Manage form submissions.: SCOPE.FORMS.MANAGE-SUBMISSIONS ## Introduction Creates a form spam submission report. Use this method to store a spam submission that wasn't saved as a regular submission. To move a saved submission to spam, call [Report Spam Submission](https://dev.wix.com/docs/api-reference/crm/forms/spam-submissions/report-spam-submission.md) instead. It creates the report and deletes the submission. The submitted values are validated against the form's fields. To upload files for the submission, call [Get Media Upload URL](https://dev.wix.com/docs/api-reference/crm/forms/form-submissions/get-media-upload-url.md) in the Form Submissions API. --- ## REST API ### Schema ``` Method: createFormSpamSubmissionReport Description: Creates a form spam submission report. Use this method to store a spam submission that wasn't saved as a regular submission. To move a saved submission to spam, call [Report Spam Submission](https://dev.wix.com/docs/api-reference/crm/forms/spam-submissions/report-spam-submission.md) instead. It creates the report and deletes the submission. The submitted values are validated against the form's fields. To upload files for the submission, call [Get Media Upload URL](https://dev.wix.com/docs/api-reference/crm/forms/form-submissions/get-media-upload-url.md) in the Form Submissions API. URL: https://www.wixapis.com/form-spam-submission-report-service/v4/form-spam-submission-reports Method: POST # Note: If the parameter `a.b` is listed under required parameters, `b` is only required if `a` is also present. Required parameters: formSpamSubmissionReport, formSpamSubmissionReport.formId, formSpamSubmissionReport, formSpamSubmissionReport.submissions, formSpamSubmissionReport.reportReason Method parameters: param name: formSpamSubmissionReport | type: FormSpamSubmissionReport | description: A form spam submission report stores a form submission that was flagged as spam, together with the reason it was flagged. Reports are deleted automatically after 30 days, unless the submission is restored as not spam. | required: true - name: formId | type: string | description: GUID of the form the submission was made on. | required: true | validation: format GUID, immutable - name: submitter | type: Submitter | description: Identity of the submitter: a member, visitor, app, or user. | required: true | validation: immutable - ONE-OF: - name: memberId | type: string | description: Member GUID. | validation: format GUID - name: visitorId | type: string | description: Visitor GUID. | validation: format GUID - name: applicationId | type: string | description: Application GUID. | validation: maxLength 36 - name: userId | type: string | description: User GUID. | validation: format GUID - name: submissions | type: Map | description: Submitted values. Each key is the `target` of a form field, and each value is what the submitter entered in that field. Validated against the form's fields when the report is created. | required: true | validation: format map, immutable - ONE-OF: - name: nullValue | type: | description: - name: numberValue | type: number | description: - name: stringValue | type: string | description: - name: boolValue | type: boolean | description: - name: structValue | type: object | description: - name: listValue | type: ListValue | description: - name: values | type: array | description: - name: reportReason | type: ReportReason | description: Reason the submission was flagged as spam. | required: true | validation: immutable - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: createdDate | type: string | description: Date and time the original submission was created. When you create a report for an existing submission, specify the submission's creation date to keep it. Can't be in the future. Default: Date and time the report is created | validation: format date-time, immutable - name: extendedFields | type: ExtendedFields | description: Custom field data for the form spam submission report object. [Extended fields](https://dev.wix.com/docs/build-apps/develop-your-app/extensions/backend-extensions/schema-plugins/about-schema-plugin-extensions.md) must be configured in the app dashboard before they can be accessed with API calls. - name: namespaces | type: object | description: Extended field data. Each key corresponds to the namespace of the app that created the extended fields. The value of each key is structured according to the schema defined when the extended fields were configured. You can only access fields for which you have the appropriate permissions. Learn more about [extended fields](https://dev.wix.com/docs/rest/articles/getting-started/extended-fields.md). | validation: format map - name: submissionStatusAtReport | type: SubmissionStatus | description: Status of the submission when it was reported as spam. When the submission is restored as not spam, a `PENDING` status becomes `CONFIRMED`. Any other status is kept. Returned as `PENDING` when the status wasn't recorded. - enum: - PENDING: A submission is created, but has not yet been recorded in the Wix Forms collection. - CONFIRMED: A submission is recorded in the Wix Forms collection. - PAYMENT_WAITING: A form submission requiring payment is created. - PAYMENT_CANCELED: An order of a form submission is canceled. - name: orderDetails | type: OrderDetails | description: Payment details of the submission. Available only for forms with payments. - name: accessRestriction | type: string | description: GUID of the user who is authorized to view the original submission. Copied from the submission's `accessRestriction`. When set, reading the report requires the same additional access check as reading the submission. | validation: format GUID, immutable - name: reportReasonDescription | type: string | description: Additional details about why the submission was flagged as spam. For example, the explanation returned by a spam moderation service plugin, or a note from the person who reported it. | validation: minLength 1, maxLength 255 Return type: CreateFormSpamSubmissionReportResponse - name: formSpamSubmissionReport | type: FormSpamSubmissionReport | description: Created form spam submission report. - name: id | type: string | description: Form spam submission report GUID. | read-only: true | validation: format GUID - name: formId | type: string | description: GUID of the form the submission was made on. | validation: format GUID, immutable - name: namespace | type: string | description: Namespace of the app that the form belongs to. Copied from the form. Currently supports `wix.form_app.form`, the namespace of the Wix Forms app. | read-only: true | validation: minLength 10, maxLength 50 - name: submitter | type: Submitter | description: Identity of the submitter: a member, visitor, app, or user. | validation: immutable - ONE-OF: - name: memberId | type: string | description: Member GUID. | validation: format GUID - name: visitorId | type: string | description: Visitor GUID. | validation: format GUID - name: applicationId | type: string | description: Application GUID. | validation: maxLength 36 - name: userId | type: string | description: User GUID. | validation: format GUID - name: submissions | type: Map | description: Submitted values. Each key is the `target` of a form field, and each value is what the submitter entered in that field. Validated against the form's fields when the report is created. | validation: format map, immutable - ONE-OF: - name: nullValue | type: | description: - name: numberValue | type: number | description: - name: stringValue | type: string | description: - name: boolValue | type: boolean | description: - name: structValue | type: object | description: - name: listValue | type: ListValue | description: - name: values | type: array | description: - name: reportReason | type: ReportReason | description: Reason the submission was flagged as spam. | validation: immutable - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: createdDate | type: string | description: Date and time the original submission was created. When you create a report for an existing submission, specify the submission's creation date to keep it. Can't be in the future. Default: Date and time the report is created | validation: format date-time, immutable - name: reportedDate | type: string | description: Date and time the submission was reported as spam. | read-only: true | validation: format date-time - name: updatedDate | type: string | description: Date and time the form spam submission report was last updated. | read-only: true | validation: format date-time - name: revision | type: string | description: Revision number, which increments by 1 each time the form spam submission report is updated. Ignored when creating a form spam submission report. | read-only: true | validation: format int64 - name: extendedFields | type: ExtendedFields | description: Custom field data for the form spam submission report object. [Extended fields](https://dev.wix.com/docs/build-apps/develop-your-app/extensions/backend-extensions/schema-plugins/about-schema-plugin-extensions.md) must be configured in the app dashboard before they can be accessed with API calls. - name: namespaces | type: object | description: Extended field data. Each key corresponds to the namespace of the app that created the extended fields. The value of each key is structured according to the schema defined when the extended fields were configured. You can only access fields for which you have the appropriate permissions. Learn more about [extended fields](https://dev.wix.com/docs/rest/articles/getting-started/extended-fields.md). | validation: format map - name: submissionStatusAtReport | type: SubmissionStatus | description: Status of the submission when it was reported as spam. When the submission is restored as not spam, a `PENDING` status becomes `CONFIRMED`. Any other status is kept. Returned as `PENDING` when the status wasn't recorded. - enum: - PENDING: A submission is created, but has not yet been recorded in the Wix Forms collection. - CONFIRMED: A submission is recorded in the Wix Forms collection. - PAYMENT_WAITING: A form submission requiring payment is created. - PAYMENT_CANCELED: An order of a form submission is canceled. - name: orderDetails | type: OrderDetails | description: Payment details of the submission. Available only for forms with payments. - name: checkoutId | type: string | description: GUID of the checkout created for the submission. | read-only: true | validation: format GUID - name: contactId | type: string | description: GUID of the contact who submitted the form: the site member who submitted it, or the contact matched to the submitter. | read-only: true | validation: format GUID - name: accessRestriction | type: string | description: GUID of the user who is authorized to view the original submission. Copied from the submission's `accessRestriction`. When set, reading the report requires the same additional access check as reading the submission. | validation: format GUID, immutable - name: reportReasonDescription | type: string | description: Additional details about why the submission was flagged as spam. For example, the explanation returned by a spam moderation service plugin, or a note from the person who reported it. | validation: minLength 1, maxLength 255 - name: childMetaSiteId | type: string | description: GUID of the site the submission was made on. Returned only when the site shares its data with a parent site. In that case, spam submission reports from all child sites are stored on the parent site, and this field identifies which site the report came from. | read-only: true | validation: format GUID Possible Errors: HTTP Code: 400 | Status Code: INVALID_ARGUMENT | Application Code: FORM_SPAM_SUBMISSION_REPORT_VALIDATION | Description: The submitted values don't match the form's fields. The error details list each invalid field in `errors`. ``` ### Examples ### Create a spam submission report Stores a submission that was never saved as a regular submission. ```curl curl -X POST \ 'https://www.wixapis.com/form-spam-submission-report-service/v4/form-spam-submission-reports' \ -H 'Authorization: ' \ -H 'Content-Type: application/json' \ -d '{ "formSpamSubmissionReport": { "formId": "21bcb6c7-02b3-4ed1-b6db-7856094fac03", "submitter": { "visitorId": "9a3f5c7e-2d4b-4e6a-8c1f-5b7d9e2a4c68" }, "submissions": { "first_name_e7a1": "Alex", "email_3c9f": "alex.morgan@example.com", "long_answer_b42d": "Buy cheap followers now at bit.ly/xyz" }, "reportReason": "MODERATION_SPI", "reportReasonDescription": "Flagged by a content moderation plugin", "createdDate": "2026-10-12T09:14:31.512Z", "submissionStatusAtReport": "PENDING" } }' ``` --- ## JavaScript SDK ### Schema ``` Method: wixClientAdmin.forms.formSpamSubmissionReports.createFormSpamSubmissionReport(formSpamSubmissionReport) Description: Creates a form spam submission report. Use this method to store a spam submission that wasn't saved as a regular submission. To move a saved submission to spam, call [Report Spam Submission](https://dev.wix.com/docs/api-reference/crm/forms/spam-submissions/report-spam-submission.md) instead. It creates the report and deletes the submission. The submitted values are validated against the form's fields. To upload files for the submission, call [Get Media Upload URL](https://dev.wix.com/docs/api-reference/crm/forms/form-submissions/get-media-upload-url.md) in the Form Submissions API. # Note: If the parameter `a.b` is listed under required parameters, `b` is only required if `a` is also present. Required parameters: formSpamSubmissionReport, formSpamSubmissionReport.formId, formSpamSubmissionReport, formSpamSubmissionReport.submissions, formSpamSubmissionReport.reportReason Method parameters: param name: formSpamSubmissionReport | type: FormSpamSubmissionReport | description: A form spam submission report stores a form submission that was flagged as spam, together with the reason it was flagged. Reports are deleted automatically after 30 days, unless the submission is restored as not spam. | required: true - name: formId | type: string | description: GUID of the form the submission was made on. | required: true | validation: format GUID, immutable - name: submitter | type: Submitter | description: Identity of the submitter: a member, visitor, app, or user. | required: true | validation: immutable - ONE-OF: - name: memberId | type: string | description: Member GUID. | validation: format GUID - name: visitorId | type: string | description: Visitor GUID. | validation: format GUID - name: applicationId | type: string | description: Application GUID. | validation: maxLength 36 - name: userId | type: string | description: User GUID. | validation: format GUID - name: submissions | type: Map | description: Submitted values. Each key is the `target` of a form field, and each value is what the submitter entered in that field. Validated against the form's fields when the report is created. | required: true | validation: format map, immutable - ONE-OF: - name: nullValue | type: | description: - name: numberValue | type: number | description: - name: stringValue | type: string | description: - name: boolValue | type: boolean | description: - name: structValue | type: object | description: - name: listValue | type: ListValue | description: - name: values | type: array | description: - name: reportReason | type: ReportReason | description: Reason the submission was flagged as spam. | required: true | validation: immutable - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: _createdDate | type: Date | description: Date and time the original submission was created. When you create a report for an existing submission, specify the submission's creation date to keep it. Can't be in the future. Default: Date and time the report is created | validation: immutable - name: extendedFields | type: ExtendedFields | description: Custom field data for the form spam submission report object. [Extended fields](https://dev.wix.com/docs/build-apps/develop-your-app/extensions/backend-extensions/schema-plugins/about-schema-plugin-extensions.md) must be configured in the app dashboard before they can be accessed with API calls. - name: namespaces | type: object | description: Extended field data. Each key corresponds to the namespace of the app that created the extended fields. The value of each key is structured according to the schema defined when the extended fields were configured. You can only access fields for which you have the appropriate permissions. Learn more about [extended fields](https://dev.wix.com/docs/rest/articles/getting-started/extended-fields.md). | validation: format map - name: submissionStatusAtReport | type: SubmissionStatus | description: Status of the submission when it was reported as spam. When the submission is restored as not spam, a `PENDING` status becomes `CONFIRMED`. Any other status is kept. Returned as `PENDING` when the status wasn't recorded. - enum: - PENDING: A submission is created, but has not yet been recorded in the Wix Forms collection. - CONFIRMED: A submission is recorded in the Wix Forms collection. - PAYMENT_WAITING: A form submission requiring payment is created. - PAYMENT_CANCELED: An order of a form submission is canceled. - name: orderDetails | type: OrderDetails | description: Payment details of the submission. Available only for forms with payments. - name: accessRestriction | type: string | description: GUID of the user who is authorized to view the original submission. Copied from the submission's `accessRestriction`. When set, reading the report requires the same additional access check as reading the submission. | validation: format GUID, immutable - name: reportReasonDescription | type: string | description: Additional details about why the submission was flagged as spam. For example, the explanation returned by a spam moderation service plugin, or a note from the person who reported it. | validation: minLength 1, maxLength 255 Return type: PROMISE - name: _id | type: string | description: Form spam submission report GUID. | read-only: true | validation: format GUID - name: formId | type: string | description: GUID of the form the submission was made on. | validation: format GUID, immutable - name: namespace | type: string | description: Namespace of the app that the form belongs to. Copied from the form. Currently supports `wix.form_app.form`, the namespace of the Wix Forms app. | read-only: true | validation: minLength 10, maxLength 50 - name: submitter | type: Submitter | description: Identity of the submitter: a member, visitor, app, or user. | validation: immutable - ONE-OF: - name: memberId | type: string | description: Member GUID. | validation: format GUID - name: visitorId | type: string | description: Visitor GUID. | validation: format GUID - name: applicationId | type: string | description: Application GUID. | validation: maxLength 36 - name: userId | type: string | description: User GUID. | validation: format GUID - name: submissions | type: Map | description: Submitted values. Each key is the `target` of a form field, and each value is what the submitter entered in that field. Validated against the form's fields when the report is created. | validation: format map, immutable - ONE-OF: - name: nullValue | type: | description: - name: numberValue | type: number | description: - name: stringValue | type: string | description: - name: boolValue | type: boolean | description: - name: structValue | type: object | description: - name: listValue | type: ListValue | description: - name: values | type: array | description: - name: reportReason | type: ReportReason | description: Reason the submission was flagged as spam. | validation: immutable - enum: - EMAIL_QUOTA_REACHED: Too many submissions with the same email address in a short time. - IP_BLOCKLISTED: The submitter's IP address is blocklisted. - EMAIL_BLOCKLISTED: An email address in the submission is blocklisted. - AI_REPORTED: Flagged by an AI model that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level. - MANUALLY_REPORTED: Reported as spam by a person, such as the site owner or a collaborator. - MODERATION_SPI: Flagged by a spam moderation service plugin installed on the site. - AI_REPORTED_LLM: Flagged by a large language model (LLM) that analyzes the submission text. Runs on forms with the `ADVANCED` spam protection level, after all other checks found no spam. - name: _createdDate | type: Date | description: Date and time the original submission was created. When you create a report for an existing submission, specify the submission's creation date to keep it. Can't be in the future. Default: Date and time the report is created | validation: immutable - name: reportedDate | type: Date | description: Date and time the submission was reported as spam. | read-only: true - name: _updatedDate | type: Date | description: Date and time the form spam submission report was last updated. | read-only: true - name: revision | type: string | description: Revision number, which increments by 1 each time the form spam submission report is updated. Ignored when creating a form spam submission report. | read-only: true | validation: format int64 - name: extendedFields | type: ExtendedFields | description: Custom field data for the form spam submission report object. [Extended fields](https://dev.wix.com/docs/build-apps/develop-your-app/extensions/backend-extensions/schema-plugins/about-schema-plugin-extensions.md) must be configured in the app dashboard before they can be accessed with API calls. - name: namespaces | type: object | description: Extended field data. Each key corresponds to the namespace of the app that created the extended fields. The value of each key is structured according to the schema defined when the extended fields were configured. You can only access fields for which you have the appropriate permissions. Learn more about [extended fields](https://dev.wix.com/docs/rest/articles/getting-started/extended-fields.md). | validation: format map - name: submissionStatusAtReport | type: SubmissionStatus | description: Status of the submission when it was reported as spam. When the submission is restored as not spam, a `PENDING` status becomes `CONFIRMED`. Any other status is kept. Returned as `PENDING` when the status wasn't recorded. - enum: - PENDING: A submission is created, but has not yet been recorded in the Wix Forms collection. - CONFIRMED: A submission is recorded in the Wix Forms collection. - PAYMENT_WAITING: A form submission requiring payment is created. - PAYMENT_CANCELED: An order of a form submission is canceled. - name: orderDetails | type: OrderDetails | description: Payment details of the submission. Available only for forms with payments. - name: checkoutId | type: string | description: GUID of the checkout created for the submission. | read-only: true | validation: format GUID - name: contactId | type: string | description: GUID of the contact who submitted the form: the site member who submitted it, or the contact matched to the submitter. | read-only: true | validation: format GUID - name: accessRestriction | type: string | description: GUID of the user who is authorized to view the original submission. Copied from the submission's `accessRestriction`. When set, reading the report requires the same additional access check as reading the submission. | validation: format GUID, immutable - name: reportReasonDescription | type: string | description: Additional details about why the submission was flagged as spam. For example, the explanation returned by a spam moderation service plugin, or a note from the person who reported it. | validation: minLength 1, maxLength 255 - name: childMetaSiteId | type: string | description: GUID of the site the submission was made on. Returned only when the site shares its data with a parent site. In that case, spam submission reports from all child sites are stored on the parent site, and this field identifies which site the report came from. | read-only: true | validation: format GUID Possible Errors: HTTP Code: 400 | Status Code: INVALID_ARGUMENT | Application Code: FORM_SPAM_SUBMISSION_REPORT_VALIDATION | Description: The submitted values don't match the form's fields. The error details list each invalid field in `errors`. ``` ### Examples ### Create a spam submission report Stores a submission that was never saved as a regular submission. ```javascript import { formSpamSubmissionReports } from "@wix/forms"; async function createFormSpamSubmissionReport() { const response = await formSpamSubmissionReports.createFormSpamSubmissionReport( { formId: "21bcb6c7-02b3-4ed1-b6db-7856094fac03", submitter: { visitorId: "9a3f5c7e-2d4b-4e6a-8c1f-5b7d9e2a4c68" }, submissions: { first_name_e7a1: "Alex", email_3c9f: "alex.morgan@example.com", long_answer_b42d: "Buy cheap followers now at bit.ly/xyz" }, reportReason: "MODERATION_SPI", reportReasonDescription: "Flagged by a content moderation plugin", _createdDate: new Date("2026-10-12T09:14:31.512Z"), submissionStatusAtReport: "PENDING" }, ); } ``` ### createFormSpamSubmissionReport (self-hosted) Self-hosted SDK calls require you to [create a client](https://dev.wix.com/docs/sdk/articles/work-with-the-sdk/about-the-wix-client.md). ```javascript import { createClient } from '@wix/sdk'; import { formSpamSubmissionReports } from '@wix/forms'; // Import the auth strategy for the relevant access type // Import the relevant host module if needed const myWixClient = createClient ({ modules: { formSpamSubmissionReports }, // Include the auth strategy and host as relevant }); async function createFormSpamSubmissionReport(formSpamSubmissionReport) { const response = await myWixClient.formSpamSubmissionReports.createFormSpamSubmissionReport(formSpamSubmissionReport); }; ``` ---