reCAPTCHA version query

My sister’s website has a Contact form which she wishes to protect against spammers.

Her developer recommends reCAPTCHA v3 because of the improved user experience compared with v2. However my worry is that because it relies entirely on AI it may be prone to false positives – and there’s no way to monitor these and unblock them, i.e. no equivalent to a spam email folder; so she could lose potential customers without every finding out about it.

I realise one can reduce the risk of false positives by lowering the thresholds but (a) it appears to be a black art to set the thresholds optimally and (b) setting them too low would defeat the object of having a reCAPTCHA in the first place.

My gut feeling is that because v2 with the “I am not a robot” checkbox forces the user to physically do something, it’s much less likely to be prone to false positives – and that it’s unlikely to be very much worse than v3 at blocking real spam. And I don’t think the user experience will be much worse as long as users are highly unlikely to have to solve puzzles – simply clicking a checkbox isn’t very onerous.

Have I misunderstood something or am I right that given the above priorities, v2 is a better bet for my sister?

Many thanks for your help.

Dave

• This topic was modified 2 years ago by daverado.
• This topic was modified 2 years ago by daverado.
• This topic was modified 2 years ago by daverado.
• This topic was modified 2 years ago by daverado.