diff --git a/roles/fas_server/templates/fas.cfg.j2 b/roles/fas_server/templates/fas.cfg.j2
index a5232f7d2d..a5a3690fd0 100644
--- a/roles/fas_server/templates/fas.cfg.j2
+++ b/roles/fas_server/templates/fas.cfg.j2
@@ -111,6 +111,16 @@ cla_deprecated_groups = ['cla_fedora']
 # Format: 'group1:a,b,c|group2:d,e,f'
 auto_approve_groups = 'packager:fedorabugs|qa:fedorabugs|security-team:fedorabugs|qa-beaker-user:qa-automation-shell|docs:fedorabugs|cla_fpca:cla_done|cla_redhat:cla_done|cla_dell:cla_done|cla_ibm:cla_done|cla_intel:cla_done'
 
+{% if env == "staging" %}
+# Anti-spam approval check script, which injects in both registration and CLA steps
+# In Fedora, this is provided by the Basset service
+antispam.api.url = 'http://basset01.stg.phx2.fedoraproject.org/basset'
+antispam.api.username = '{{ basset_stg_frontend_user }}'
+antispam.api.password = '{{ basset_stg_frontend_pass }}'
+antispam.registration.autoaccept = False
+antispam.cla.autoaccept = False
+{% endif %}
+
 # Some server parameters that you may want to tweak
 server.socket_port=8088
 server.thread_pool=50