My contact form brings spam instead of customers — how do I filter out fake leads?

You added a contact form to your website so customers could reach you. Instead, your inbox fills with offers for "guaranteed SEO," messages from foreign agencies, half-English text, and strange links. And the real inquiries? They get buried among them, or worse, land in your own spam folder.

The problem isn't a bad website. It's that any public form on the internet is eventually found by automated bots that fill in forms endlessly. The good news: this is almost fully solvable, without putting any hurdles in front of a real customer. Let's look at what a fake lead looks like, why it shows up, and which filters actually work.

Why your form gets spam (it's not your fault)

Form spam doesn't come from people who looked at your website. It comes from automated programs that scan the internet, find form fields, and fill them out in bulk — the same way on thousands of sites at once. They're not looking for you; they're looking for any open form.

The reasons are a few:

• They want to sell you services (SEO, "guaranteed traffic," business directories).
• They test whether your form sends email — to abuse it later.
• They try to slip in links or malware.

The key point: most of these messages are sent by bots, not people. And bots behave differently from a real customer — and that exact difference is what lets us filter them out.

How to spot a fake lead at a glance

Before technical filters, learn to read the messages. A fake lead almost always shows a few signs:

• The message has nothing to do with what you do — they're offering you a service instead of asking for one.
• The text is generic, often in English, with phrasing like "We noticed your website...".
• The name and email look random, and the phone is missing or invalid.
• It contains links or web addresses you never asked for.
• It arrives at odd hours, in bursts, several within a minute.

A real customer, by contrast, writes about THEIR problem: "I run a cafe, I want a website," "how much does it cost," "when can we talk." It's short, concrete, sometimes with typos — but it makes sense. When in doubt, one criterion decides it: is the message asking you for something, or selling you something?

Filters that stop spam without scaring the customer

Many people slap on an aggressive CAPTCHA (pick all the traffic lights) and lose real customers who get annoyed and leave. There are better options, invisible to humans:

• Honeypot field: a hidden field a human never sees but a bot fills in. If it's filled, the message is spam and gets blocked automatically.
• Time check: if the form is "completed" in under a second, it's clearly a bot — no human types that fast.
• Invisible reCAPTCHA (v3): runs in the background, asks the user nothing, and returns a trust score.
• Phone validation: a phone field requiring a valid format stops many lazy bots.

Most important: good filters are invisible. The real customer shouldn't have to prove they're human — the bot should be caught without the human feeling any friction.

What to do with messages that still get through

No filter catches everything. For the rest, you need a small system, not infinite patience.

• Send inquiries to a separate email or a dedicated tab, not your personal inbox — so they don't mix with everything else.
• Set an automatic rule in your email: messages containing "SEO," "ranking," "guest post," or suspicious links go straight to a folder, not to Trash. You check it once a week, in case something real slipped in.
• Never reply to junk messages and never click their links. A reply confirms your address is active.

And if you keep getting real inquiries mixed with spam, it's a sign your form emails you with no sorting at all. A properly set-up form should let you sleep easy — not sort junk every morning.

When it's worth asking for help

If you have a form on WordPress, Wix, or another site and you're drowning in spam, the problem often gets solved in about an hour: honeypot + time check + invisible reCAPTCHA, plus clean email routing. There's no need to rebuild your whole site.

At MPO Web Studio we build sites with clean forms from the start — with invisible bot filters and inquiries delivered where you'll see them immediately, not buried in spam. We work remotely across the country, we can show you a ready-made demo first, and pricing is transparent, no surprises.

If you just want us to fix your current form or build one that brings customers, not junk, send us a short message on WhatsApp. We'll tell you honestly whether it's a one-hour fix or something bigger — without selling you what you don't need.