🛡️ User Scan & Actions Guide

The User Scan analyzes all WordPress users and assigns a risk score based on email intelligence, domain behavior, and abuse signals. This helps identify spam, fake, or suspicious accounts before taking action.

⚡ Available Actions (User Row)

Action	Description	What Happens	Precaution
🗑 Delete User	Permanently removes the selected user	User account is deleted from WordPress	Irreversible. Verify before deleting.
🚫 Move to Spam	Deletes user and adds email to spam list	Email is blocked from future registrations	Ensure email is truly malicious
✅ Whitelist	Marks user/email as safe	Prevents future false positives	Use only for trusted users

📊 User Risk Scoring

Each user is assigned a score (0–100) based on detected signals. Higher score indicates higher risk.

Signal	Score Impact	Description
📧 Spam Email	+60	Email found in spam intelligence database
🕒 Disposable Email	+50	Temporary or throwaway email provider
❌ Invalid Email / No MX	+40	Domain cannot receive emails or is fake
🔁 Duplicate Email Pattern	+50	Multiple accounts using similar email patterns
🌐 Abusive Domain	+40	Known spam or blacklisted domain
🚨 IP Abuse / Blocked IP	+40 to +60	IP involved in spam or already blocked

🚦 Risk Levels

Status	Score Range	Meaning
High Risk	60+	Very likely spam or fake account
Medium Risk	30–59	Suspicious, requires review
Clean	0–29	No significant risk detected

🔒 Protected Users

Certain users are automatically marked as Protected:

✔ Administrators
✔ Currently logged-in user

Protected users:

✔ Cannot be deleted
✔ Cannot be marked as spam
✔ Are always treated as safe

This prevents accidental lockouts or critical account removal.

⚠️ Important Notes

Always review High Risk users before taking bulk actions
Use Whitelist to reduce false positives
Spam detection improves over time as intelligence lists grow
Actions like delete or spam are permanent

ShieldPress Documentation