Hey everyone! I'm currently using the Quform plugin for the contact forms on my WordPress site, and I've enabled Google reCAPTCHA v3. I've properly added both the site key and secret key, and the Quform backend confirms that reCAPTCHA v3 is active. However, my client is still receiving a ton of spam through the contact forms. I've checked the keys, updated both Quform and WordPress, changed the reCAPTCHA theme and badge position, and ensured there are no outdated or duplicate forms. I'm wondering why reCAPTCHA v3 isn't effectively blocking spam. Would switching to reCAPTCHA v2 (the checkbox) help? Are there any tweaks in Quform, like adjusting the v3 score threshold, that could cut down on spam? Or should I consider implementing another anti-spam solution or plugin alongside reCAPTCHA? Any insights or personal experiences would be really helpful! Thanks!
5 Answers
You might want to test your form to see if it truly needs reCAPTCHA. Try submitting the form without filling out the reCAPTCHA, both with JavaScript enabled and disabled. This way, you can ensure the reCAPTCHA is functioning correctly.
Consider keeping an eye on your reCAPTCHA activity at https://www.google.com/recaptcha/admin. There, you can view your site's statistics and check if spam is getting through. If you're looking for alternatives, services like hCaptcha and FriendlyCaptcha might be worth checking out.
It’s important to make sure your contact form isn't easily exploited. When users submit the form, a generic confirmation message like 'We've received your message' works best if you're emailing them back. It reduces the chances of leaking information.
We've been using reCAPTCHA v3 Invisible for our online store and have noticed about 2-3% false positives. To improve spam detection, we added a simple honeypot—a hidden text input field with CSS that users can't see. Bots usually fill in every field, but real users won't touch that hidden one. If that field isn't empty, then it's likely a bot trying to spam you.
Related Questions
Cloudflare Origin SSL Certificate Setup Guide
How To Effectively Monetize A Site With Ads