Skip to content

Review and manage spam on individual forms

Last updated: January 22, 2026

Available with any of the following subscriptions, except where noted:

Review, filter, and manage spam submissions alongside your form’s regular submissions. This helps you monitor suspicious activity, understand why a submission was blocked, and manage your incoming submissions in one place. 

For example, you can check whether a submission was flagged for containing a suspicious URL or blocklisted email address, then release it if it was incorrectly marked as spam.

To access this feature, a Super Admin must opt your account into the Improved Spam visibility & management in Forms beta. If your account isn’t opted into the beta, learn how to manage submissions on the spam submissions index page.

Permissions required Forms permissions are required to review, release, or delete spam submissions.

Review spam submissions for an individual form

  1. In your HubSpot account, navigate to Marketing > Forms.

  2. Click the name of the form to review it.
  3. Click the Spam tab.
  4. To review spam submission insights, navigate to the Spam Protection section to view the following data:
    • Spam Severity: the number of form submissions that have been blocked and the number that have been released back to your regular submissions. 
    • Spam Types: the most common spam types that have been blocked on the form. 
    • Automatic Deletion: the number of form submissions that'll be automatically deleted in the next seven days and next 30 days. 
A form's spam tab, showing spam submission insights. This includes Spam Severity, Spam Types, and Automatic Deletion panels summarizing form spam activity and scheduled deletions.
  1. To review all form submissions that have been marked as spam, navigate to the Blocked Submissions section. The Spam type column will display the reason the submission was marked as spam. This may include: 
    • URL in Name Field: a URL was detected in the first or last name field.
    • Blocklisted Email Address: the submitted email address or domain is on a known spam list.
    • Malicious Script: an attempt to inject executable code was detected. These submissions are automatically blocked to maintain your account security. You can safely ignore or delete these records.
    • Unregistered Site Domain: an embedded form submitted from an external site is not included in your tracked site domains
    • HTML in Name Field: an HTML tag was detected in the first or last name field.
    • Gibberish (Marketing Hub or Content Hub Professional or Enterprise only): a random series of characters was detected in one of the submission’s text fields, except Sensitive Data fields. Learn more about Improved AI-powered Gibberish detection for form submissions beta.
    • Filtered by reCAPTCHA: bot behavior or suspicious activity was detected by Google's reCAPTCHA. 
    • Excluded source: the submission came from an IP address or referrer domain excluded from your site analytics.
  1. To filter spam submissions, at the top of the table, select from the following filters:
    • Spam Type: the reason the submission was marked as spam.
    • Will be deleted after: the date the submission will be automatically deleted.
  2. To review spam submission details, hover over a submission and click View submission.
  3. In the right panel, view the information submitted through the form fields.

Manage spam submissions 

If you confirm that a spam submission is legitimate, you can release the submission. This removes it from your spam submissions and adds it to your regular form submissions. 

If you confirm that a submission is spam, you can also manually delete the submission. Spam form submissions that are not released are automatically deleted after 90 days

Impact of releasing spam submissions

Releasing a form submission may result in the following: 

  • Create a new CRM record or update existing records. 
  • Trigger associated workflows when automation uses form submission filters. 
  • Update form submission counts and analytics.

Please note: form submissions marked as spam because of an excluded source do not update traffic analytics when they are released. For example, if a form is submitted from an excluded IP address and the form submission is released, it does not update the number of form views. 

Release or delete spam submissions for an individual form

  1. In your HubSpot account, navigate to Marketing > Forms.
  2. Click the name of the form to review it.
  3. Click the Spam tab.
  4. Hover over a submission, then click View submission.
  5. To release the submission, at the bottom of the right panel, click Release.
    • Click Confirm in the dialog box.
  6. To delete the submission, at the bottom of the right panel, click Delete.
    • Click Delete in the dialog box. 
    • Deleting a spam submission permanently removes it from your account. This action cannot be undone.
  7. To release or delete your spam submissions in bulk, select the checkboxes next to the submissions you want to release or delete. To select all submissions, select the checkbox in the top left of the table.
    • Click Release to submissions at the top of the table. Then, click Confirm in the dialog box.
    • Click Delete at the top of the table to permanently remove the selected submissions. Then, click Delete in the dialog box.
Blocked submissions table with selected rows, bulk actions for Release and Delete, and columns for submission ID, spam type, submitted date, and deletion date.

 

Was this article helpful?
This form is used for documentation feedback only. Learn how to get help with HubSpot.