The spam fix that costs you the one enquiry a week that matters
Honeypot, timing and invisible scoring remove most of the volume without a human ever seeing them. A visible image puzzle removes spam and enquiries together.
Form spam is the complaint that arrives three weeks after launch, and it is usually solved badly. The common reaction is to add a visible challenge, which costs you real enquiries, when the measures that work are the ones a human visitor never notices.
Invisible first
- A honeypot field, hidden from sight and from assistive technology, that rejects any submission which fills it. Cheap, invisible, and it removes most of the volume.
- A time check. A form submitted under two seconds after load was not filled in by a person reading it.
- An invisible challenge rather than a puzzle. Modern options score the session in the background and only interrupt when the score is bad.
- Server-side validation of the fields you actually need, because most junk submissions fail a simple format check on the phone number or the message length.
Never use a visible puzzle as the first line
Image puzzles are an accessibility barrier and a conversion cost. They are also the thing that stops the one enquiry a week that matters, because a busy person on a phone abandons a form that asks them to identify bicycles. If spam is bad enough to need a visible challenge, the right order is honeypot, timing and invisible scoring first, and the visible version only for the residue.
Check the plan, not just the filter
On Webflow the free Starter plan caps form submissions at 50, while Basic and above are unlimited. A site that has silently hit a submission cap looks exactly like a site with a broken form, and more than one agency has spent a day debugging JavaScript on a plan problem. Test the whole path after every launch: submit, confirm the email arrives, confirm the notification address is a monitored mailbox rather than somebody who left.
