Website platform
Squarespace form spam: change the Email Notification
One address per form: Squarespace connects a single email to each form, so this is a swap and not an addition.
Replace whatever is in that field with the address Humainbox generates for you. Nothing else changes: no plugin, no snippet, no DNS record, and nothing on your site to republish. If you want to stop, put your old address back in that field.
Email Notification
change thisGoogle Drive
Not connected
Mailchimp
Not connected
Google reCAPTCHA
Enabled
Why it is getting through
What Squarespace already stops — and where it stops
The form block is the only way into the site, which is the point of it, and it is also why the same address collects everything: the person asking about availability and the agency that has generated four hundred of these this morning arrive through the same three fields.
reCAPTCHA is switched on by default for Squarespace form blocks, and on most sites it is v3 — invisible, no puzzle, just a score for how human the session looked. Scoring the session is a sound answer to a script posting at your form. It is not an answer at all to a person in a browser pasting in text a model wrote.
What Squarespace keeps either way
The email is a notification, not storage. Squarespace passes the submission through to whatever you connected — a mailing list, the Contacts panel, Google Drive — and if an address is the only thing you connected, the email is the record.
We check the message itself
A captcha asks whether the sender is a machine. We ask whether the writing could only have been sent to you.
Nothing is deleted
Held mail stays readable in the panel for your whole retention window, and one click sends it on.
If we break, your mail still arrives
If anything breaks on our side, mail goes through. You get the noise back for an afternoon; you never lose an enquiry.
Questions
Squarespace, specifically
The ones that come up about this builder rather than about us. If yours is not here, ask it — a person answers.
Can I add this address alongside my own rather than replacing it?
No, and that is a Squarespace limit rather than ours: only one email address connects to each form, and their own suggestion is to forward at your mail provider if you need several. It is also why the first week runs in dry run — nothing is held, everything is delivered exactly as it is today, and you see what we would have stopped without having given anything up.
reCAPTCHA is on. Why is this still coming through?
Because reCAPTCHA is answering a question nobody is failing any more. v3 never shows a challenge; it watches the session and scores it. A real browser, a real person, a real pause before submitting — that is a good score, and the paragraph inside it is not something reCAPTCHA reads.
Will my mailing list and Contacts still fill up?
Yes. Storage connections on the form block are configured separately from the email notification and none of them run through us. If you want the list clean as well as the inbox, that is a different problem and this will not solve it.
Where is the field exactly?
Open the page, click the Form block, click the pencil to edit it, and go to the Storage tab. Email Notification is the field there — clicking it lets you change the address.
Not sure what is already running on your contact page? Paste it into the free check and we will name the builder, the CAPTCHA and what your DNS says. No account, nothing stored.
Cannot find it on your Squarespace?
Menus move between versions, themes hide panels, and an agency may have built something on top of the standard one. Send us the address of your contact page and we will look at the install you have rather than the one this page was written about. A person reads it, and replies within a day.
And if the person who can change that field is not you, Humainbox writes to them instead — the field, the address, and nothing else to read.
Checked against Squarespace’s own documentation
Using something else?
If a form can send its notification to an address you choose, it works, whether or not it is on this list.