Unfortunately, it is a reality that anyone with a website today will inevitably be a victim of spam. Spam is simply a way for people and/or companies to make money. They spam thousands of websites with the hopes that even 10% of people will bite and buy their services. They also spam for SEO reasons. More backlinks to their site means a higher ranking. Fortunately, Wordpress has caught on to this tactic and now makes comment links "no follow", meaning the referring site does not receive any SEO "juice" from that link.
With that being said, you will still get spammed no matter what. This will come from your Contact form as well as from blog comments. There are several things you can do to prevent a majority of it. On your contact form, the easiest thing to do is to add a captcha. A captcha is the blurry code or image that you must decipher before you are allowed to submit a message. This prevents spam from bots, as only human spammers are able to read the captcha image text.
As for the blog comments, on most therapist websites we decide that it is best to disable comments altogether. The majority of your clients would not necessarily want to publicly comment about their mental health, so the minor engagement that your blog could generate is not worth the spam trouble. If you do insist on having comments on your blog, we could add a captcha there as well.
If you have any further questions or concerns, please contact your Project Manager or submit a request at the top of your screen.