Hi @ebouilleur,
Thanks for reaching out!
I believe you configured your form to send the notification to users who filled the form, and this would be related to the issue. In case it helps, please check our tutorial on how to do this.
You could verify your notification settings and temporarily configure your form to send notifications only to a specific email address.
To prevent spammers in your form(s), we have some anti-spam options.
In WPForms Lite, we have a built-in anti-spam option which is enabled by default in the form builder > Settings > General (see screenshot here).
We also have integration with Google’s free reCAPTCHA service. In case it helps, here’s a detailed tutorial on how to set up reCAPTCHA in WPForms.
And if you’d prefer not to use reCAPTCHA, we have another anti-spam protection feature, hCaptcha. This is a good option if you’d prefer not to sign up for Google’s reCAPTCHA service. Within your forms, hCaptcha will display a checkbox asking users to prove they’re human (much like Google’s v2 Checkbox reCAPTCHA). We have a detailed guide for setting up hCaptcha.
Another option you might want to consider is setting up the Akismet anti-spam protection. This option will allow you to integrate Akismet which is one of the top anti-spam protection plugins on www.ads-software.com to your forms. You should be able to seamlessly set this up by following the instructions here.
Alternatively, you can consider the third-party plugins such as WordPress Zero Spam or Spam protection, AntiSpam, FireWall by CleanTalk which work out of the box to protect your forms against spam.
Hope this helps!