Spam & Security

Where are the spam settings?

Open your form, click Settings and scroll to Spam & Security. You'll find Basic Spam Filter and a set of classifier toggles. reCAPTCHA, Cloudflare Turnstile and the honeypot have their own guides.

Anything Formbold flags as spam goes to the Spam folder in Submissions, not your Inbox. Check that folder once in a while, especially in the first week after you change these settings.

What does the Basic Spam Filter do?

It checks each submission on our servers, so your visitors don't see a puzzle or a checkbox. Turn it on for every form. There's no downside, and it catches a lot of the obvious junk.

What do the classifier filters do?

They run on top of Basic Spam Filter. Each one looks for a specific kind of junk, and you can turn them on or off independently. Turn on the ones that match the spam you actually get; leave the rest off.

• Disposable Emails: temporary domains such as mailinator or 10minutemail
• Spammy URLs: link shorteners, invite links, raw IP addresses and blacklisted domains
• Marketing Spam: unsolicited SEO, backlink, web-design and outsourcing pitches
• Adult Content: adult solicitation and platform promotions
• Fraud Scams: advance-fee, lottery and phishing-style messages
• Drug Sales: unsolicited pill and substance pitches
• Crypto Scams: wallet phishing, fake airdrops and investment lures
• Abusive Language: profanity, insults and slurs aimed at you or your team

A match on a turned-on classifier goes to the Spam folder, same as the Basic Spam Filter.

Can I limit which websites can use my form?

Yes. Allowed Domains, just below Spam & Security, rejects submissions that come from sites you haven't listed. It's on Starter and higher. See Form Settings.

Do webhooks receive spam?

Not by default. The Webhook dialog has a separate Receive submissions marked as spam checkbox, off unless you turn it on. See Webhooks.

Where are reCAPTCHA, Turnstile and the honeypot?

They live in the same Spam & Security card, and each has its own guide: reCAPTCHA, Cloudflare Turnstile and Honeypot Protection.