Bots still get spam through honeypot on contact forms
Spam bots keep getting past the honeypot on contact forms with fresh text, random strings and AI-written messages.
Tier I · Proven The best-established problems.
9 public reports · first reported 13 April 2026 · last reported 12 October 2026
What's going wrong
Many site owners report that spam keeps reaching their contact forms even with the honeypot enabled. The spam includes random alphanumeric strings in text areas, the same template sentence repeated across sites, German-language newsletter requests that look real, and messages from multiple form plugins including Elementor, Contact Form 7, WPForms, Forminator and Fluent Forms. Some owners changed the honeypot field name or disabled JavaScript and still saw the spam increase. Owners who paid for the Pro version report the same problem. A paid add-on that checks message content, not just hidden fields, would fill this gap for small businesses.
AI-assisted: written with the help of AI from the reports.
Products affected
WP Armour – Honeypot Anti Spam.
Related problems
Who has this problem
1 business found.
Unlock them at the top of this page — $19.
All sales are final — no refunds.
Each business's name, the address it published, and the page it was published on. Paid through Stripe; you get a private page to bookmark, with a CSV download.