How Do You Stop Spam Leads From Your Website Form?

The short answer

Score the traffic before you trust the lead. Google's reCAPTCHA v3 gives every form submission a score from 0.0 to 1.0, where 1.0 is very likely a good interaction and 0.0 is very likely a bot. Google says you can start with a threshold of 0.5, then adjust it after you look at your own traffic.

Why spam leads cost more than they look

A fake form fill isn't just clutter. Every junk lead that reaches a sales team takes a call, a text or an email that should have gone to a real person. It also skews reporting. If one source sends a pile of bot submissions, it can look busier than a source that sends fewer, better leads. Our post on tracking lead quality by source covers how to separate the two.

How reCAPTCHA v3 works

According to Google's reCAPTCHA v3 documentation:

• It doesn't interrupt the visitor. There's no checkbox or picture puzzle. The script runs in the background and returns a score.
• Your server makes the call. The page sends a token to your backend, which verifies it with Google and gets the score back. What you do with that score is up to you.
• Start by watching, not blocking. Google suggests running reCAPTCHA without taking action at first, then choosing thresholds based on the traffic you see in the admin console.
• Label your actions. Naming each place you run it, such as a quote form or a contact form, gives you a breakdown by action in the admin console.

What to do with low scores

Blocking everything under 0.5 on day one can turn away real people. A safer plan:

1. Log scores for a week or two before you block anything.
2. Send borderline scores to review instead of throwing them away. A quick human check or a follow-up confirmation catches mistakes.
3. Block only the clear bots once you know where your real visitors land.
4. Recheck after changes. A new ad campaign or a redesigned form can shift your scores.

Other simple filters

reCAPTCHA isn't the only layer. Many forms also reject obviously bad phone numbers or email formats, limit repeat submissions from the same visitor and ask one qualifying question a bot is unlikely to answer well. None of these replace fast follow-up with the real leads that get through. Our post on speed to lead explains why that matters.

Bottom line

Spam filtering protects your team's time and your reporting. Score submissions with reCAPTCHA v3, start at Google's suggested 0.5 threshold in watch mode, and tune it to your own traffic before you block.

Want leads you can act on? Ask about roofing and real-estate leads or competing auto seller enquiries through TX Lead Forge.