My contact form is getting spam — how do I stop bots?

Use the reCAPTCHA plugin:

1. Tick Enable reCAPTCHA, choose the version (v2 Checkbox, v2 Invisible or v3), and add your Google reCAPTCHA site key and secret key.
2. Tick the forms to protect: customer login, sign-up, forgot password, checkout, and Contact & custom forms.
3. For forms made in the Form Builder, also turn reCAPTCHA on in each form.

Real customers can still submit, while automated spam is blocked.