Form Spam

Since the beginning of 2023, Webflow has been targeted by some spammers which mean a significant increase in SPAM.

Webflow's team has added features to block it, but this has resulted in occasional instabilities in the form handling system.

At present Feb-2025, everything seems to be functioning.

Webflow Anti-Spam

Automatic Spam Detection

Enabled in your site-wide form settings##.

Community reports indicate that a lot of spam is not detected, and gets through.

reCAPTCHA Anti-Spam Protection

Optionally, you can enable reCAPTCHA anti-spam protection, however this is enabled site-wide and not per-form. If you enable it under your site settings, every Webflow-managed form must have a reCAPTCHA block added to it from the elements panel.

When you do this, make certain that the element is within the form itself.

Bot Protection

Webflow’s bot-blocking setting uses AI to analyze mouse movements, inputs, and other signals on your site to separate bots from valid site users and block form submissions from bots. When this setting is enabled, bot detection applies to all forms on your site. You can use this alongside other spam prevention methods like reCAPTCHA and spam filtering##.

However, be aware-

https://discourse.webflow.com/t/advisory-webflows-recently-released-bot-protection-may-break-complex-sites/295957

Other Techniques

Another approach is to use a honeypot, so that JS prevents form submission.

https://webflow.com/made-in-webflow/website/testing-honeypot

3rd Party Anti-Spam

Basin

So far the best approach by far Sygnal has found is to have all form submissions handled by a 3rd party handler called Basin.

Formspark + Botpoison

https://webflow.com/made-in-webflow/website/formspark

‍