Russian Spam

Hello,

We do see that you have a ReCaptcha on your Contact Form which is a good start. We have also verified that the ReCaptcha is working as expected.

We suspect that it’s not the form submissions causing issues but the plaintext email addresses displayed throughout your website (Homepage and Contact Page). Unfortunately we are at a point of the internet where it’s rudimentary to parse a websites text and pull any found email addresses. We recommend as an alternative to direct users to your contact form instead of displaying your email address.

If you believe that the above is not the case in most spam submissions, you could increase the Security Preference on the API Key itself, but that may make it more frustrating for actual users trying to submit your forms. See the documentation from Google for more information. If you’re still having spam issues with the form you could try switching over to v3 of ReCapthca (which Contact Form 7 natively supports). This is supposed to be a better version since it monitors how the user interacts with the entire website and not just a specific page. See the Contact Form 7 documentation for more information (and you could uninstall this plugin).

Thank you for the response. I see that I should have included this line from the bottom of the message –
This e-mail was sent from a contact form on dougal (https://dougalsongs.com)

That would suggest that it is from the contact form and not the scraped email address.

Sorry for including that content. I thought It might help to solve the problem. I will not in future.

I will try the V3. Thanks.