topic Re: 1K Spam Submissions on hubspot form in <6 hours in Lead Capture Tools

1K Spam Submissions on hubspot form in <6 hours

garrettwolfe — Wed, 12 Mar 2025 13:19:31 GMT

I'm getting tons of spam submissions on a hubspot form on my webflow website. I'm on the free plan and I cant use the ReCAPTCHA because i need to restyle the form elements and that is only available thru an embeddable iframe. Any suggestions?

Re: 1K Spam Submissions on hubspot form in <6 hours

PamCotton — Wed, 12 Mar 2025 21:42:19 GMT

Hey @garrettwolfe, thank you for posting in our Community!

Another option is to add custom validation if you can use JavaScript, or try creating a custom HTML form in Webflow for more styling control. Hopefully, one of these helps reduce the spam.

To our top experts, @TomM2 and @Anton do you have any other recommendations for the @garrettwolfe matter?

Thank you,

Pam

Re: 1K Spam Submissions on hubspot form in <6 hours

TomM2 — Thu, 13 Mar 2025 16:28:02 GMT

Hey @garrettwolfe this is unfortunately just a drawback of having a public form on a public page. If you can't use the HubSpot provided recaptcha you'll need to implement your own validation process in some way.

Re: 1K Spam Submissions on hubspot form in <6 hours

Anton — Thu, 13 Mar 2025 21:17:44 GMT

Hey @garrettwolfe,

checked it with a free portal of mine.

Recaptcha is possible and available in free accounts. Also it should never be restyled as it's sort of "trademark" of Google.
You should definitely add some data privacy options to your form - regardless of the spam. It could be something simple like "I have read and accepted the terms of use"...
You can add a hidden field to the form and build some sort of a so-called honeypot solution with JavaScript(usually you could do this with a workflow, but it's not available on free/starter) like "if hidden field is populated - deactivate Subscribe button".
Reason for this is following: A human will never populate a hidden field. Therefore if the system recognizes that the field is populated it deactivates the button and it's harder(not impossible) to trigger the form sending button/option.

best,

Anton