Skip to content

Prevent spam form submissions

Last updated: June 19, 2023

Available with any of the following subscriptions, except where noted:

All products and plans
HubSpot manages spam form submissions by automatically validating the form's email, first name, and last name fields: 

You can provide additional protection against spam form submissions by enabling CAPTCHA on your form or blocking specific email domains and free email providers


Enabling CAPTCHA adds a step to your form verifying that a visitor is not a robot, before they can submit the form. To enable CAPTCHA on a form:

  • In your HubSpot account, navigate to Marketing > Forms.
  • Hover over a form and click Edit
  • In the left pane, under the Other Form Elements section, click to toggle the Captcha (SPAM Prevention) switch on.
  • In the top right, click Update or Publish. After enabling CAPTCHA, Google's invisible reCAPTCHA will appear on your form when you add the form to a page. If Google determines that a visitor is suspicious, they must solve a CAPTCHA challenge before they can submit the form.

Please note:

  • If your regular form or pop-up form includes a follow-up email, a CAPTCHA will automatically be added to the form. To remove the CAPTCHA from the form, delete the follow-up emails in the Automation tab of the form editor.
  • If CAPTCHA has been enabled on the form, form submissions from the Submit data for a form API or other form integrations will not be accepted. 

Block specific email domains or free email providers 

If you have a Marketing Hub Starter, Professional, or Enterprise subscription, you can block specific email domains or free email providers to encourage your visitors to provide high-quality business email addresses. These settings are configured on an individual form level and can be used on both forms and pop-up forms. 


Was this article helpful?
This form is used for documentation feedback only. Learn how to get help with HubSpot.