All Formaloo forms include built-in spam and bot protection by default.
This protection works silently in the background, so there is no visible CAPTCHA checkbox or puzzle for your users to complete.
ℹ️ Instead of asking users to prove they’re human (for example by selecting images or typing distorted text), Formaloo automatically analyzes signals such as browser behavior, interaction patterns, and submission characteristics to detect suspicious activity.
This means the protection is always active behind the scenes, without adding extra steps for your users.
With this native, in-built protection layer:
Real users do not see anything – the form experience stays smooth and friction-free 👌
Bots and automated scripts are automatically filtered or blocked ⛔
No manual configuration is required – the protection is enabled on all forms by default ✔️
In practice, this built-in system detects and blocks the vast majority of automated bot submissions while keeping the form experience simple for legitimate users.
Adding reCAPTCHA for extra protection
On the Business and Enterprise plans, you can enable reCAPTCHA on forms as an additional visible layer of bot protection.
When enabled, a reCAPTCHA verification box appears directly above the Submit button, requiring users to confirm they are not a bot before submitting the form:
To enable reCAPTCHA:
Open your form in the editor
Go to form's Settings in the right-hand panel
Scroll to Bot protection (reCAPTCHA)
Toggle the option on:
⚠️ Important note:
reCAPTCHA feature is only supported in forms hosted on the native Formaloo domain (workspace_name.formaloo.me).
At this time, it is not supported on forms published under a custom domain (including domains inherited from Workspace settings ➜ Forms custom domain).
If your forms are hosted on a custom domain, the native background protection will still remain active automatically ✔️