I don’t think so.
We believe the issue is stemming from Google Ads (which is a whole other problem we have to address with them).
So someone or team is clicking on Google Ads the same ad that lands on the same page (we use multiple pages for Ads) and then navigating to the contact page and completing the WP Forms.
We have changed URL’s being affected by this and the form name plus paused the Ads to see if this halts the spam.
So far it’s worked, but it’s all very strange. The contact information placed on the forms was corrected but when we contacted the users (by phone) they claimed to have never filled out the form or visited our site, and that the email was one they no longer use.
We are almost sure all of the spam message originated from our Google Ads campaigns.