Stop Webflow Form Spam Forever

Webflow's spam handling stops at "on"

Webflow's Form component ships with a single spam control: a Google reCAPTCHA toggle. Turn it on and every visitor solves a challenge; turn it off and anything goes. There's no honeypot fallback, no way to score submissions before they hit your inbox, and no way to restrict which domains are allowed to submit — so a single leaked embed or scraped page can flood your notifications indefinitely.

Route the form through FormBridge instead

Webflow's own Form component always posts to Webflow's backend, so to add a real spam pipeline you swap it for a plain HTML form inside an Embed element and point the action at a FormBridge endpoint:

<form action="https://app.formbridge.ai/api/forms/fb_8h2k9p" method="POST">
  <input name="full-name" placeholder="Full name" />
  <input name="email" type="email" placeholder="Email" />
  <textarea name="message" placeholder="Message"></textarea>
  <button type="submit">Send</button>
</form>

You keep full control of the markup, so existing classes and custom CSS carry over — this is just a different element wrapping the same fields.

What you get on top

Once submissions run through FormBridge, every one is scored automatically before it reaches your inbox — no setup required. From there, Form → Settings → Spam Protection lets you layer on:

• CAPTCHA — reCAPTCHA or hCaptcha, each configured with a site key and secret key from your Google or hCaptcha account.
• Honeypot — a hidden field (default name honeypot, or your own) that silently rejects any submission that fills it in, since real visitors never see it.
• Authorized domains — an allow-list restricting which domains submissions may come from; leave it empty to accept from anywhere.

Anything flagged lands in a separate Spam tab instead of your inbox, so you can spot-check without digging through real leads.

Setting it up

1. Create a form endpoint in FormBridge and copy its URL.
2. Replace your Webflow Form component with an Embed element containing the HTML form above.
3. Turn off Webflow's native reCAPTCHA — it's redundant once FormBridge is scoring submissions.
4. Configure honeypot, CAPTCHA, and authorized domains from the form's Spam Protection settings.
5. Set your notification recipients and check the Spam tab periodically for false positives.

The free plan covers up to 1,000 submissions a month, which is plenty for most single-form marketing sites — upgrade to Pro ($9/mo, 25,000 submissions) if you're running higher-traffic campaigns.