Built-In Anti-Spam

Gravity Forms includes a built-in anti-spam honeypot that catches most automated bots. This is enabled by default on all forms — no setup required. It works by adding a hidden field that real visitors won’t see, but bots will fill in, flagging the submission as spam.

Google reCAPTCHA

For extra protection, Gravity Forms supports Google reCAPTCHA (v2 checkbox or v3 invisible). This can be enabled under Forms → Settings → reCAPTCHA by entering your Google reCAPTCHA site and secret keys. Once configured, add the reCAPTCHA field to any form.

Akismet Integration

If you have the Akismet plugin active on your site, Gravity Forms can use it to filter spam. Enable it under Forms → Settings → Akismet. Akismet checks submissions against a global spam database and is particularly effective for text-heavy forms like comments and enquiries.

When to Contact InnerMedia

If you’re receiving a sudden increase in spam despite these protections, contact InnerMedia. We can add additional measures such as Cloudflare Turnstile, custom validation rules, or IP-based blocking to stop persistent spam attacks.