Prevent spam and bot submissions on your forms by using advanced prevention for invisible bot detection without a visual challenge. This will provide a seamless experience for your respondents while ensuring that the information you collect is authentic and that your form submissions are from real people
Invisible reCAPTCHA protection is available on Plus and higher plans. Check out our plans and pricing page here.
What is invisible reCAPTCHA?
Invisible reCAPTCHA is a Google service that helps protect websites from spam and abuse. Invisible reCAPTCHA never interrupts your respondents, so it protects you from spam submissions without generating friction or affecting conversion.
How does it work?
Invisible reCAPTCHA works by analyzing interactions with your site and returning a score for each request. It works best when it can collect the most context about both legitimate and abusive user behavior to determine if the interactions are coming from humans or bots.
You can find out more about how Google reCAPTCHA v3 bot protection and online fraud protection works here and here.
Note! Currently, spam filters can't be set up following the instructions below for forms on custom domains. If you're using a custom domain, and you also want to enable advanced spam prevention, please contact your CSM, and they can help you set up a manual configuration to allow these features to work together.
If you're collecting partial submissions, responses will be categorized as spam after passing the first Partial Submit Point.
How to enable advanced bot protection on your forms
1. Create a new form or open an existing one.
2. Click the Settings button.
3. Under the General tab, scroll down to Preferences, toggle on Advanced prevention and click Save.
4. With Advanced prevention, your respondents won't see a visual challenge when completing your form, but the spam responses (if any) submitted to your form will be displayed in a separate Spam folder in the Results tab.
Note: The tool used for advanced spam prevention (Google reCAPTCHA v3) can sometimes incorrectly detect responses from humans as spam (false positives). In the future, we're planning to send validated spam and validated non-spam submissions back to Google to improve the performance of reCAPTCHA. This will ultimately reduce the occurrence of false positives.
Advanced spam protection FAQ
Do spam responses collected with advanced prevention count toward my response limit?
No, spam responses don't count toward your response limit, and they are not delivered via the API, webhooks, or integrations either.
Can reCAPTCHA be enabled for all my forms on an account level?
No, reCAPTCHA can only be enabled on a form-level basis. This means that you need to enable it separately for each form you want to have reCAPTCHA protection.
How long do spam responses stay in the spam folder?
Spam responses are stored for 14 days, and any spam responses older than 14 days will be deleted and will no longer be accessible.