How are you protecting your Marketo Forms from being spammed? | Community
Skip to main content
Level 2
June 2, 2020
Question

How are you protecting your Marketo Forms from being spammed?

  • June 2, 2020
  • 1 reply
  • 6223 views

I'm curious what each of you are doing within your Marketo instance to protect it from bots and spam form fill outs. Or perhaps it's something you're doing on the LP side of things. 

 

I know of the honey pot method and implementing recaptcha (which is a pain btw) - but has this actually worked for any of you? I need to find a good solution.

 

Examples please! I know I'm not the only that has been faced with this.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

1 reply

SanfordWhiteman
Level 10
June 2, 2020

reCAPTCHA does exactly what it's supposed to do - distinguish humans from bots. (This isn't the same as humans filling in bad data vs. humans filling in good data.)

 

Email validation on the server plus reCAPTCHA is a perfect combo.

 

Honeypots are imaginary. They don't do anything.

Level 2
June 2, 2020

@sanfordwhiteman thanks for your reply. 

 

Could you please let me know what you've done as far as validation on server side and how you've setup recaptcha?

 

On the recaptcha side I basically followed this documentation (it's ANCIENT) https://www.evernote.com/shard/s24/client/snv?noteGuid=6476e863-c4c5-4f1d-9094-143069b7c279&noteKey=c20c0aaa32331258&sn=https%3A%2F%2Fwww.evernote.com%2Fshard%2Fs24%2Fsh%2F6476e863-c4c5-4f1d-9094-143069b7c279%2Fc20c0aaa32331258&title=Google%2BreCAPTCHA%2BV2-Mkto%2Bforms%2Bintegration

 

but it was the only thing I was able to find. 

 

I agree with you on honeypots.

SanfordWhiteman
Level 10
June 2, 2020

Yes, that doc is very outdated. I have a much newer approach that works with reCAPTCHA v3 (just set it up on a new instance yesterday). Will add it to the Products blog within the next week, it's on my to-do list.

 

For validation on the server we use a commercial service whose name I can't mention here due to community rules, but from the Marketo perspective they all work the same way: call a webhook, get immediate validation response or deferred response, poll the webhook again after a time if deferred response.