I haven’t had an issue with form submission spam on Webflow, but the last few days I’m getting spam submissions every few hours, every day.
I just set up Recaptcha, but still having issues.
Anyone else dealing with spam? Any recommendations?
1 Like
Yes, spam went up and we’re getting it on a daily basis, also with reCAPTCHA.
Just commented to support your post as the resources I’ve seen are not free to use and clients won’t be happy with budgeting again.
Let’s hope webflow can apply some filters. 
2 Likes
Thanks for the support.
Agree — Webflow should come up with a solution, because this is very obvious spam from Russian bots.
Spams over WF form is long term issue (check forum) that was never solved. That is why you should use other services recommended on WF forms spam requests.
Despite implementing reCAPTCHA and anti-spam measures, we began receiving a large number of spam messages three days ago. This morning, I set up a filter through Zapier to block messages containing any URLs or written in Russian… While this solution is effective, it is time-consuming and exhausting to manage for each client.
you can find in many responses related to spams that many developers avoid using WF forms and use 3-rd party services like “usebasin” etc. because they take care about everything. 
I keep seeing the spam posts issues a lot – is this an issue with webflow internal forms or does it affect forms that are embedded with webflow classes too? (e.g., zoho, formspark, etc)
It’s specific to Webflow’s native form submission handler.
You can use Webflow’s forms with your own 3rd party submission handler ( Basin, Formspark, Make, Zapier, custom… ), and most of your SPAM issues will be resolved. I use Basin and it’s practically 100% effective.
You can also use a 3rd party embedded form, like Jotform, Zoho, etc. though you trade styling consistency as the form is designed in a 3rd party form builder.
I see! So, to clarify: If I’m using POST method with third-party forms, I should be okay?
Form builders and form submission handlers are different things. Either approach would help you here.
I prefer the 3rd party form handler approach so that I can design my forms in Webflow, but control the data, and the email notifications, and eliminate spam, with Basin.
This is a big issue to use 3rd party tools that raise the price clients have to pay for hosting.
Having the same problem with one of my client’s sites. Seems like the spam is Russian in origin. I hope Webflow can do something about it.
Same, and it’s increasing.
Same, even with reCaptcha enabled and custom message content filtering, we still getting tons of spams every day
hi all, has anyone found a solution for the spamming issue?
@Stelios_Kyriakides - Yep, use a third-party form processor like Basin.
I have many similar issues, indeed mostly Russian, though languages are changing over time, but usually non-English.
We host over 30 sites and all of them have gone into unacceptable amounts of spam. Most of them have ReCaptcha, but that doesn’t matter. Less than 5% of all form-submissions is actual valid (some even go below 1%).
This should indeed be handled by Webflow. Form submissions always have been an important function and always should receive the utmost care/security.
Does anybody know if there is/are official statement(s) on this by Webflow Org?
It would be great to have info on the progress for that. A lot of us are getting spammed. This is a critical issue to get solved urgently. It’s there since Jan 2023…
Even when using third party it seems like the bots still directly submit to WF by bypassing even the captcha.
On hosted sites, you can now navigate to Settings > Forms and under Spam Protection toggle on the ‘Bots are being blocked’ option which was recently released by Webflow.
Yes, I thought that would solve the problem, but yesterday got another 9 form submissions from bots, so that new update didn’t do the trick, unfortunately…