How to Stop Spam in Webflow Forms

Noticed a sudden spike in spam through your Webflow forms?

If I built your site, just flick me a message — I’ll help you implement any of the options below, free of charge. Or, if you want to handle it yourself, here’s what to do based on the official Webflow guide.

1. Turn On Bot Blocking

Webflow’s bot blocking feature uses AI to analyse mouse movements, inputs, and other signals to tell the difference between bots and real users. When it’s on, it applies to all forms across your site.

To enable it:

• Go to Site Settings → Forms → Spam Protection
• Turn on bot blocking
• Publish your site

You can use this alongside other spam prevention methods.

Important: If you turn this on, Webflow recommends adding a small piece of custom code to your site. This helps avoid potential issues where your submit button might stop responding properly. The official Webflow article includes that code and instructions — link at the end of this post.

‍

2. Enable Spam Filtering

Spam filtering looks at the content of form submissions and filters out anything that looks like spam. Like bot blocking, it works site-wide when turned on.

To enable it:

• Go to Site Settings → Forms → Spam Protection
• Turn on spam filtering
• ‍

That Might Be All You Need

In most cases, turning on both bot blocking and spam filtering will handle the bulk of spam coming through your forms. If things calm down after that, you’re good to go.

But if you’re still seeing dodgy submissions, there are a couple of extra tools available.

‍

4. Add CAPTCHA (reCAPTCHA)

Webflow supports CAPTCHA via a reCAPTCHA field that you can add to your forms. It asks users to prove they’re human before submitting.

CAPTCHA is effective for stopping automated spam, but it can affect user experience and isn’t foolproof against more advanced bots.

‍

4. Use a Honeypot Field

The honeypot technique adds a hidden field to your form. Visitors won’t see it, but bots usually will — and if they fill it out, the submission gets flagged as spam and discarded. Check out the official docs to see how to set this up.

‍

Wrapping Up

Spam isn’t fun, but it’s manageable. Start with bot blocking and the spam filter — in most cases, that’s enough. If needed, layer on reCAPTCHA and some basic field rules.

If I built your site, I’ll handle this setup for you — just reach out.

‍

Need More Help?

Official Webflow Documentation

Want the full instructions or the custom code snippet for bot blocking? Check out Webflow’s official guide below:

Read Webflow’s Spam Prevention Guide →