Why your spam filter stopped catching contact form spam
Contact form spam used to announce itself. Now it references your work and asks for fifteen minutes. What changed, what the research shows, and how to filter it without losing enquiries.
Blog
Contact forms started receiving mail that reads like a person wrote it, because something wrote it to read that way. These are notes on what changed, why the filters everyone already had stopped catching it, and what actually helps.
Contact form spam used to announce itself. Now it references your work and asks for fifteen minutes. What changed, what the research shows, and how to filter it without losing enquiries.
Four patterns that show up in almost every machine-written sales approach, the three things a real enquiry does that none of them manage, and what to do when one lands in your form.
Everything else
A CAPTCHA checks whether a visitor is human, not whether they wrote to you. What reCAPTCHA, hCaptcha and Turnstile do now, what they cost real visitors, and when they are worth it.
Every layer Contact Form 7 offers in 2026 — what each one catches, what it costs the visitors you want to hear from, and why the well-written pitches walk through all of them.
Every other mailbox can learn who to trust. A contact form cannot, because a stranger writing to you for the first time is the whole point. What sender checks miss, and what still helps.
Try it on your own mail
Change one setting in your contact form. Spam stops arriving, and real enquiries go to whoever should answer them. Try it for a week with nothing switched on.
We would like to use Google Analytics and recognise this browser when you come back, which sets cookies. Decline and neither happens, and nothing is sent to Google. What these are.