Still Getting Spammed? 3 Ways to Bulletproof Your Website's Inquiry Form

Hey everyone, this is Neo.

If you run an international e-commerce site, you’ve probably dealt with this annoyance: every morning your inbox is stuffed with unreadable spam, while real customer inquiries get buried in the noise. What’s worse, most of that spam is being auto-submitted through your website’s contact form (like Contact Form 7).

Don’t worry — almost every site owner hits this. When I first started my independent store, I was drowning in spam too. After a lot of research and trial and error, I put together a few defense methods that actually work. Today, I’m sharing them with you as someone who’s been through it, walking you through exactly how to put an iron shield on your site’s forms and kick spam to the curb for good.

Why Does Your Site Get Spam?

In short, the internet is crawling with bots. They’re built to scan websites automatically, find forms without any protection, and blast them with ads, phishing links, and other junk. Your contact form is just another target on their list.

The core idea for solving this is simple: add a verification step to your form so bots can’t submit it automatically.

Below I’ll walk you through three protection methods, from simple to advanced, so you can pick what fits your site and your technical comfort level.

Method 1: Lightweight Defense — Built-in Quiz

This is a simple, lightweight verification feature built right into the Contact Form 7 plugin. You set a question and answer, and users have to answer correctly before the form will submit.

Pros:

  • No third-party service to sign up for — setup is dead simple.
  • Almost zero impact on page load speed.
  • Stops most of the basic spam bots out there.

Cons:

  • The question is static — if someone is determined, it can be cracked.
  • It’s a small extra step for users, so it feels slightly clunky.

How to Set It Up

  1. Log into your WordPress admin, go to Contact > Contact Forms.
  2. Select the form you want to edit.
  3. In the form editor, insert a line right before the [submit] button. You can click the “Quiz” tag above the editor to generate it quickly.

Example code:

<label> Captcha: 5 + 3 = ? (enter the number)
[quiz math-quiz "5+3=?|8"] </label>

[submit "Send Now"]

Here’s what this line means:

  • math-quiz is a unique name for this question (you can rename it).
  • In "5+3=?|8", the part before | is the question shown to users, and the part after is the correct answer.

Save the form, check your site’s front end, and you should see the verification question appear. It’s simple, but for a freshly launched site, it’s a fast and effective fix.

Method 2: The Ultimate Solution — Google reCAPTCHA (Highly Recommended)

This is widely considered the most powerful captcha solution with the best user experience, and it’s my personal top pick. Google’s smart algorithms analyze user behavior in the background to tell humans from bots — most users never even notice it’s there.

Pros:

  • Extremely secure: Google’s AI accurately identifies malicious traffic — top-tier protection.
  • Great UX: The recommended v3 is “invisible” — users don’t click “I’m not a robot” or solve image puzzles. Verification happens automatically while the form loads.
  • Official integration: Contact Form 7 integrates with Google reCAPTCHA out of the box, with a clear setup flow.

Cons:

  • You need to register for Google reCAPTCHA and get API keys — the process takes a little while.
  • For users in mainland China, Google services are restricted, so the captcha may fail to load or slow your site down.

How to Configure Google reCAPTCHA v3

The whole process has two steps: get your Google keys, then configure WordPress.

Step 1: Get Your Google reCAPTCHA Keys

  1. Visit the Google reCAPTCHA site: Open your browser and go to https://www.google.com/recaptcha/admin/create (you’ll need normal access to Google services).

  2. Register your site:

    • Label: Pick a name you’ll remember, like “My B2B Site”.
    • reCAPTCHA type: Make sure you choose “reCAPTCHA v3” — it gives the best user experience.
    • Domains: Enter your site’s domain, e.g. your-domain.com.
    • Accept the terms: Check “Accept the reCAPTCHA Terms of Service”.
    • Click Submit.

  3. Copy your keys: After submitting, you’ll see two important keys:

    • Site Key
    • Secret Key

    Copy both — you’ll need them in a second.

Step 2: Configure Contact Form 7 in WordPress

  1. Back in your WordPress admin, find Contact > Integration in the left menu.
  2. Find the reCAPTCHA card and click Setup Integration.
  3. Paste the Site Key and Secret Key you copied into the corresponding fields.
  4. Click Save Changes.

That’s it — really that simple.

Once configured, Contact Form 7 automatically protects every form on your site. You’ll notice a small Google reCAPTCHA badge in the bottom-right corner of your pages, which means your site is now under protection. Those annoying bots won’t get through your forms anymore.

Method 3: A Fallback for Special Cases — Third-Party Captcha Plugins

If your users are mostly in mainland China, or you’d rather avoid Google services, third-party captcha plugins are a solid alternative.

Pros:

  • Lots of variety: image captchas, SMS verification, and more — something for every need.
  • Some plugins are optimized for the China market and load fast.

Cons:

  • Extra plugin to install, which adds complexity to your site.
  • Plugin quality and security vary a lot, so you need to vet them carefully.

How to Choose and Use One

  1. In WordPress, go to Plugins > Add New and search for keywords like captcha or login no captcha.
  2. Some well-known options:
    • hCaptcha for WordPress: A great reCAPTCHA alternative with a strong focus on privacy.
    • Login No Captcha reCAPTCHA: Feature-rich and supports multiple forms.
  3. After installing and activating, you usually configure it in the plugin’s settings page, then insert the plugin’s shortcode into your Contact Form 7 form per the plugin’s docs.

This route is flexible, but it takes some research and testing to make sure the plugin plays nicely with your theme and other plugins.

Summary and Recommendations

Method Rating Pros Cons
Built-in Quiz ★★★☆☆ Simple, fast, no dependencies Average security, slightly clunky UX
Google reCAPTCHA v3 ★★★★★ Secure, smart, excellent UX Restricted access in mainland China
Third-party plugin ★★★☆☆ Flexible, diverse, China-friendly options Adds complexity; need to vet quality

My final advice:

  • For international-facing e-commerce sites: Go straight to Google reCAPTCHA v3 — no hesitation. It’s the one-and-done best choice.
  • For sites mainly serving China: Start with the built-in Quiz, and if you need more security, look for a reliable third-party captcha plugin.

Hope this article helps you finally get rid of spam on your site. Spend ten or fifteen minutes setting it up and you’ll enjoy lasting peace and quiet — time better spent on your actual customers. If you run into any issues along the way, feel free to reach out!