Spam is being sent with leads

You’re 100% sure it’s going thorough this plugin, even with recaptcha enabled/configured?

The honeypot only fools the unsophisticated bots.

This plugin does not offer Akismet integration (at this time).

Recaptcha should catch most automated spammers, but can’t stop really determined ones or human ones.

If the spammer get ahold of your ORG ID they can spam you all day… via the Web-to-Lead API directly.

Um, so if they are spamming me thru the API how do I stop that??

Who is responsible to control spammers thru this API, Salesforce?

Here an example of one of those, and of course it was added to the SF database:
https://screencast.com/t/nc6poh8vW5m6

• This reply was modified 5 years, 4 months ago by Noche70.
• This reply was modified 5 years, 4 months ago by Noche70.

That is from the plugin, not direct to the API.

API spam is Salesforce’s issue, but it looks like it’s not the issue here.

Can you share your form URL with me? You can email it to [email protected] if you want to do so privately.

Thank you Nick, I just emailed you.

BTW your domain is luminfire.com LOL

• This reply was modified 5 years, 4 months ago by Noche70.
• This reply was modified 5 years, 4 months ago by Noche70.

I’m having a similar problem using reCaptcha. I changed the keys. Spam definitely coming from this plugin and not SF as you described. A prior developer had CF7 activated but I’ve deactivated it but still getting the same kind of spam. Let me know how to email you the link link to my site.

Thank you

To be clear: if spammers are defeating recaptcha, there’s not much the plugin can do about that.

I’ll look into it when I can, but it’ll be a bit before I can dive in.

Hello, we are also getting a huge increase in spam as well. We are using the plug-ins built-in Captcha.
Thank you!

The built in captcha is long out of date and easily defeated.

It’ll be deprecated in the next release and eventually not selectable. I’d suggest migrating now.

I’m very familiar with reCaptcha and manage over 50 sites which utilize it, with much higher profiles and traffic than the one I have your SF plugin installed on. I understand this is NOT an easy problem to troubleshoot, but please consider there may be some kind of vulnerability with the way you’ve implemented it. It could be that there’s absolutely nothing wrong with your implementation, but in my case, I’ve not seen an increase in bot spam through reCaptcha implemented in any other site I manage – using custom code, Gravity Forms, CF7, WP Cerber, WordFence, etc.

Thanks for your consideration. All the best to you.

@nickciske Which Captcha app do you suggest is the best? Thank you for the response!

Google Recaptcha is built into the plugin. Use that.