HubSpot forms with spam protection turned off

Forms without spam protection let bots create junk contacts, trigger workflows, and inflate your marketing contact count, which can raise your HubSpot bill. Check each public form’s spam protection setting, turn it on, and watch submission quality afterwards.

FormsFORM-002Updated 2026-10-28

Why it matters

Junk contacts enter nurture workflows, get assigned to sales, and distort conversion reports.

If junk contacts become marketing contacts, they can count toward your HubSpot contact tier.

How to find it in HubSpot

Open Marketing > Forms.
Open each public form and go to its options or settings.
Check whether reCAPTCHA or spam protection is enabled.
Look at recent submissions for obvious junk to find the worst-hit forms.

How to fix it safely

Turn on reCAPTCHA or spam protection for every public form.
Delete obvious junk contacts that came in through the affected forms, after checking they have no deals.
Monitor submission quality for two weeks after enabling protection.

How Ancil checks this

Rule: FORM-002
What it looks for: Checks active forms for reCAPTCHA. It reports when at least 2 forms, or 50% or more of forms, have it disabled.
Severity: Info. Warning when 70% or more of forms are unprotected.
Evidence shown: The number and share of unprotected forms.
Governed fix: Not automated. Ancil flags the forms. Turning protection on is a quick change your team makes in HubSpot.

HubSpot forms without a required email field HubSpot forms with no consent settings HubSpot contacts with invalid email addresses How to find duplicate contacts in HubSpot

Run this check and 149 more.

Ancil connects to HubSpot read-only in about 60 seconds. Nothing changes in your portal without your approval.

Install from HubSpot Browse all checks