Hello,
It does look like the ReCaptcha is implemented properly. Note that at this point in its lifecycle, Google recommends upgrading to ReCaptcha v3.
Below We’ll outline some methods to help fight against spam:
– We see you have a plaintext email address in the footer of your website. While this is nice for visitors, bots can scrap this email address and add it to their spam lists. We recommend removing this in favor of linking to your contact page.
– Depending on the Spam you’re receiving, you can block specific email addresses or keywords by visiting “Settings > Discussion” in your admin panel. In the “Disallowed Comment Keys” section, you can enter specific keywords to block – any contact form submissions which have these keywords, email addresses, or IP addresses that you input here will be marked as spam and not sent. For more information, we recommend reading the Contact Form documentation regarding this subject -> https://contactform7.com/comment-blacklist/
– In your Google Recaptcha Admin Console, in API key settings for your ReCaptcha v2 API Key is a Security Preference you can increase to try and mitigate Spam submissions. For more information, please see Googles documentation -> https://developers.google.com/recaptcha/docs/settings
– Upgrade to ReCaptcha v3. You would no longer need this plugin installed as Contact Form 7 inherently supports v3 out of the box. ReCaptcha v3 is what both Google and Contact Form 7 recommend as a modern solution to Spam prevention. For more information, please review Contact Form 7’s documentation -> https://contactform7.com/recaptcha/
Hopefully, using the above notes, you’re able to mitigate the Spam submissions that you’re receiving. Should you have any questions, comments, or concerns, please reply to this thread, and we can assist further. Have a wonderful rest of your week!
