Form builder
HubSpot form spam: stop it reaching the notification
HubSpot will not take an arbitrary address here — the recipient must be a HubSpot user in your account, or the notification has to be sent by a workflow instead.
HubSpot only accepts existing HubSpot users as notification recipients, so the address has to belong to one. On Professional and Enterprise a workflow can send the internal notification anywhere.
Replace whatever is in that field with the address Humainbox generates for you. Nothing else changes: no plugin, no snippet, no DNS record, and nothing on your site to republish. If you want to stop, put your old address back in that field.
Send submission email notifications to
Send to the contact owner
Off
Why it is getting through
What HubSpot already stops — and where it stops
The cost of this one is not only the reading. Every submission that reaches a HubSpot form becomes a contact record, and contacts are what HubSpot bills on — so a month of generated enquiries is a list you now have to clean and a tier you are closer to outgrowing.
HubSpot's form protection is mostly about bots and disposable addresses — reCAPTCHA on the form, blocked email domains. What it does not do is read the submission and decide whether it was written to you, which is the only thing left once the sender is using a browser and a real mailbox.
What HubSpot keeps either way
Everything. The contact and the submission are created in HubSpot whatever address the notification goes to, and nothing on our side changes that. Humainbox filters the notification, not your CRM.
We check the message itself
A captcha asks whether the sender is a machine. We ask whether the writing could only have been sent to you.
Nothing is deleted
Held mail stays readable in the panel for your whole retention window, and one click sends it on.
If we break, your mail still arrives
If anything breaks on our side, mail goes through. You get the noise back for an afternoon; you never lose an enquiry.
Questions
HubSpot, specifically
The ones that come up about this builder rather than about us. If yours is not here, ask it — a person answers.
Can I put a Humainbox address in the notification field at all?
Not directly, and this is the one restriction to read before you start: HubSpot only lets you pick existing HubSpot users as form notification recipients. So the address has to belong to a user in your account. On Professional and Enterprise there is a second route — a workflow triggered by the form submission can send an internal notification to an address of your choosing.
Will spam submissions still create contacts in HubSpot?
Yes. The record is created by HubSpot when the form is submitted, before any notification is sent, and we are downstream of that. What changes is that the pitch stops arriving in somebody's inbox with a question mark over whether it needs answering.
So what does this actually buy me on HubSpot?
A notification you can trust. The point of a form notification is that something arrived worth a person's attention, and it stops being worth anything the moment most of what it announces is generated. If your problem is the contact list rather than the inbox, say so before you sign up — this may not be the right tool for it.
Do the contacts still get my follow-up email?
Yes, if you have one set. Follow-up emails to the submitter are configured separately from internal notifications and we are not in that path at all.
Not sure what is already running on your contact page? Paste it into the free check and we will name the builder, the CAPTCHA and what your DNS says. No account, nothing stored.
Cannot find it on your HubSpot?
Menus move between versions, themes hide panels, and an agency may have built something on top of the standard one. Send us the address of your contact page and we will look at the install you have rather than the one this page was written about. A person reads it, and replies within a day.
And if the person who can change that field is not you, Humainbox writes to them instead — the field, the address, and nothing else to read.
Checked against HubSpot’s own documentation
Using something else?
If a form can send its notification to an address you choose, it works, whether or not it is on this list.
