Protect your forms from spam from malicious users, including bots, by using spam prevention without a visual challenge. This will provide a seamless experience for your respondents while ensuring that the information you collect is authentic and that your form submissions are from real people
Invisible reCAPTCHA protection is available on Plus and higher plans. Check out our plans and pricing page here.
What is invisible reCAPTCHA?
Invisible reCAPTCHA is a Google service that helps protect websites from spam and abuse. Invisible reCAPTCHA never interrupts your respondents, so it protects you from spam submissions without generating friction or affecting conversion.
How does it work?
Invisible reCAPTCHA works by analyzing interactions with your site and returning a score for each request. It works best when it can collect the most context about both legitimate and abusive user behavior to determine if the interactions are coming from humans or bots.
You can find out more about how Google reCAPTCHA bot protection and online fraud protection work here.
If you're collecting partial submissions, responses will be categorized as spam after passing the first Partial Submit Point.
How to enable bot protection on your forms
1. Create a new form or open an existing one.
2. Click the Settings button.
3. Under the General tab, scroll down to Preferences, toggle on Spam prevention and click Save.
4. With Spam prevention, your respondents won't see a visual challenge when completing your form, but the spam responses (if any) submitted to your form will be displayed in a separate Spam folder in the Results tab.
Note: Spam prevention uses Google reCAPTCHA technology and can sometimes incorrectly detect human responses as spam (false positives). In the future, we're planning to send validated spam and validated non-spam submissions back to Google to improve the performance of reCAPTCHA. This will ultimately reduce the occurrence of false positives.
Restore spam responses
If some of your responses were incorrectly flagged as spam, you can recover them from your spam folder. This makes Spam prevention safer to use: a false positive no longer means losing a valuable lead, registration, or form response.
You’ll need the following to restore spam responses:
- Be on a Growth Pro, Growth Custom, or Enterprise plan
- Have Spam prevention enabled on your form
By marking spam responses as Not spam, the responses will move back to the Responses folder and be processed like regular submissions, so integrations, webhooks, notifications, follow-ups, and contact sync can run after recovery.
To restore spam responses:
- In the Spam tab of your Responses, select the responses you want to restore.
- Click Not spam to restore the selected responses.
- Click Mark as not spam.
- After confirmation, the responses you’ve restored will disappear from the Spam list, and they’ll appear in the Responses view.
Important information about restoring spam responses:
- You must be a Workspace owner or editor to restore spam responses. Viewers cannot select or restore spam responses.
- You can select to restore up to 100 spam responses at a time.
- The form must be open to new responses. If it is closed, a banner explains why restoration is unavailable, and all checkboxes are disabled.
- Each restored response counts as one response from your plan. At the plan’s response limit, you can still select responses and click Not spam, but you’ll be taken to a paywall instead of restoring them.
- The original submission timestamp will be preserved on the restored response.
- Responses can be recovered for 60 days until they are deleted from the Spam folder. After deletion, you can no longer recover spam responses.
Spam protection FAQ
Do spam responses collected in prevention count toward my response limit?
No, spam responses don't count toward your response limit, and they are not delivered via the API, webhooks, or integrations either.
Can reCAPTCHA be enabled for all my forms at the account level?
No, reCAPTCHA can only be enabled on a form-level basis. This means that you need to enable it separately for each form you want to have reCAPTCHA protection.
How long do spam responses stay in the spam folder?
Spam responses are stored for 60 days, and any spam responses older than 60 days will be deleted and will no longer be accessible.