Last updated: April 11, 2025
Available with any of the following subscriptions, except where noted:
All products and plans
|
- When a visitor enters their email address into the default email field on a HubSpot form, if the email address is not formatted correctly, or if the email has globally bounced, the form cannot be submitted.
- If a form is submitted with a URL or HTML tag in the first or last name field, it will be flagged as spam. Learn more about managing your form's spam submissions.
- If you have a Content Hub Professional or Marketing Hub Professional subscription and have opted into the Improved AI-powered Gibberish detection for form submissions beta, any submission containing gibberish in any text field will be flagged as spam. Learn more about managing your form's spam submissions.
You can provide additional protection against spam form submissions by enabling CAPTCHA on your form or blocking specific email domains and free email providers.
Enable CAPTCHA
Enabling CAPTCHA adds a step to your form verifying that a visitor is not a robot, before they can submit the form. HubSpot uses reCAPTCHA v2 for spam prevention.
To enable CAPTCHA on a form:
- In your HubSpot account, navigate to Marketing > Forms.
- Hover over a form and click Edit.
- In the left pane, under the Other Form Elements section, click to toggle the Captcha (SPAM Prevention) switch on.
- In the top right, click Update or Publish. After enabling CAPTCHA, Google's invisible reCAPTCHA will appear on your form when you add the form to a page. If Google determines that a visitor is suspicious, they must solve a CAPTCHA challenge before they can submit the form.
Please note:
- If your regular form or pop-up form includes a follow-up email, a CAPTCHA will automatically be added to the form. To remove the CAPTCHA from the form, delete the follow-up emails in the Automation tab of the form editor.
- If CAPTCHA has been enabled on the form, form submissions from the Submit data for a form API or other form integrations will not be accepted.
Score-based bot detection
If you've enabled CAPTCHA, form submissions will be assigned a risk score ranging from 0.0 (high risk) to 1.0 (low risk). Any submission with a reCAPTCHA score between 0.0 AND 0.1 will be automatically marked as spam with the spam type Filtered by reCAPTCHA.
Block specific email domains or free email providers
If you have a Marketing Hub Starter, Professional, or Enterprise subscription, you can block specific email domains or free email providers to encourage your visitors to provide high-quality business email addresses. These settings are configured on an individual form level and can be used on both forms and pop-up forms.
