How to Stop Spam on Google Forms

Short answer

Google Forms has no CAPTCHA or spam filter, so use these settings instead:

  1. Settings Responses turn on Limit to 1 response. Respondents must sign in to Google, which stops most bots.
  2. If sign-in would cost you real responses, add a required spam-check question ("What is 3 + 4?") with response validation.
  3. Close the form once you have what you need.

Does Google Forms have a CAPTCHA?

No. Google Forms has no CAPTCHA, no reCAPTCHA and no spam filter. You can't add one yourself either, because Google hosts the form and you never get to edit its code. Anyone, or anything, with the link can submit.

Spam usually starts when the link ends up somewhere public: a website, a social post or a directory. Bots collect those links and fill them in. The settings below make that harder, strongest first.

Require sign-in

Bots rarely have Google accounts, so asking people to sign in stops most automated spam.

  1. Open the Settings tab and expand Responses .
  2. Turn on Limit to 1 response . Respondents must sign in to Google, and each account can submit once.
  3. Or set Collect email addresses to Verified. That also requires sign-in, and records each person's Google email with their answers.
Google Forms Settings, Responses section: Collect email addresses dropdown and Limit to 1 response, which requires respondents to sign in to Google
Collect email addresses (1) and Limit to 1 response (2) both sit under Responses.

The cost is real. People without a Google account can't respond at all. People on a phone or a work laptop often give up at the login screen. For a contact form, a lead form or a survey of customers, you lose genuine responses along with the spam.

On a Google Workspace account you can go further and let only people in your organization respond. On current forms that is under Published, then Manage. On older forms it is in Settings, under Responses.

Add a spam-check question

This is the nearest thing to a CAPTCHA in Google Forms, and it doesn't need sign-in.

  1. Add a Short answer question such as "Spam check: what is 3 + 4?" and turn on Required.
  2. Click the three dots ⋮ at the bottom right of the question and choose Response validation.
  3. Set it to Number, Equal to, 7.
  4. Type an error message such as "Please answer the spam check".
Google Forms short answer spam-check question with response validation set to Number, Equal to 7, and a custom error message, marked Required
Response validation (1) only accepts 7, and Required (2) stops people skipping it.

Simple bots fill every box with random text, fail the check and never submit. It won't stop a person spamming by hand, or a bot written for your form, and every real respondent has to answer it too. Change the sum now and then if spam creeps back.

Limit responses and close the form

A form that has stopped accepting responses can't be spammed. Two built-in settings help:

Share the link carefully

  • Send the link by email or in a private group instead of posting it on a public page, where bots look.
  • Embedding the form on your website doesn't hide it. The form's address is in the page code, so bots can still find it.
  • If a form is being flooded, make a copy and share the new link with the people who need it. The copy has a new address and starts with no responses.

Delete spam responses

  1. Open the Responses tab and click Individual .
  2. Use the arrows to find a junk response and click the trash icon to delete it.
  3. To clear everything, click the three dots on the Responses tab and choose Delete all responses.

Deleting can't be undone. Rows already copied to a linked Google Sheet stay in the sheet, so delete them there too. If spam keeps arriving between clean-ups, turn off Get email notifications for new responses in the same three-dot menu until the settings above are in place.

Where Google Forms spam protection stops

Every Google Forms option either makes people sign in or makes them answer an extra question. Neither suits a public contact form, a lead form or a customer survey.

What you wantGoogle FormsFormNX
CAPTCHANoYes, free plan
Invisible honeypot that catches botsNoYes, on every form
Stop bots without a loginNo, sign-in neededYes
Limit repeat submissions from one IP addressNoYes
Block disposable email addressesNoYes, on paid plans
Close at a set timeYesYes, open and close

FormNX spam protection is built into every form. An invisible honeypot field runs on every form automatically. It is a hidden box that real visitors never see and bots fill in, so bot submissions are rejected before they reach you. It also turns away forms sent back faster than any person could fill them in. Turn on the CAPTCHA in the form settings for a second check. You don't need your own reCAPTCHA keys or any add-on.

On paid plans you can also block disposable email addresses, which stops throwaway sign-ups on lead and registration forms. Email OTP verification goes one step further: the form only submits after the person enters a code sent to their inbox.

Keep bots out, let people in

Build your form in FormNX, turn on spam protection and share the link. No Google sign-in, no spam-check sums.

Try spam protection free

Free plan. No credit card required.

Comparing the two in more depth? See the Google Forms alternative page.

FAQ

Questions people ask about this

  • Does Google Forms have a CAPTCHA?

    No. There is no CAPTCHA or reCAPTCHA setting, and you can't add one yourself because Google hosts the form and you can't edit its code. The closest options are requiring sign-in and a spam-check question with response validation.

  • Why is my Google Form getting spam?

    Google Form spam usually starts when the link is posted somewhere public, such as a website, social media or a directory, where bots collect it. Anyone with the link can submit, and Google Forms doesn't check whether the person is human unless you require sign-in.

  • How do I stop bots on Google Forms without forcing sign-in?

    Add a required question that a person answers easily and a bot guesses wrong, such as "What is 3 + 4?". Then use response validation so only 7 is accepted. It stops simple bots, but not a person or a bot built for your form. For stronger protection without sign-in you need a form builder with a CAPTCHA, such as FormNX.

  • How do I delete spam responses in Google Forms?

    Open the Responses tab, click Individual, go to the junk response and click the trash icon. Responses already copied to a linked Google Sheet stay in the sheet, so delete those rows there too.

  • How do I stop getting emails from Google Forms?

    If they are new-response alerts for your own form, open the Responses tab, click the three dots and turn off Get email notifications for new responses. If you are receiving unexpected emails that link to a Google Form, don't enter any passwords. Use the Report link next to "Does this form look suspicious?" at the bottom of the form.

  • Can I block an email address or IP address in Google Forms?

    No. Google Forms doesn't show respondents' IP addresses and has no block list. Requiring sign-in with Limit to 1 response is the closest option, as it stops the same Google account submitting twice.

  • How do you protect a form from spam bots?

    Use more than one check. A hidden honeypot field catches bots that fill in every box. A CAPTCHA stops most of the rest, and a limit on repeat submissions from one IP address slows a flood. Google Forms has no anti-spam setting like these, only sign-in or a spam-check question. FormNX runs a honeypot on every form, and the CAPTCHA is one setting.

  • Can I find out who is spamming my Google Form?

    Usually not. Google Forms doesn't record IP addresses, so an anonymous spammer leaves no trace. If you set Collect email addresses to Verified, each response shows the Google account that sent it.

Stop bots without a Google sign-in

Every FormNX form has an invisible honeypot that catches bots, plus an optional CAPTCHA, so real people answer without logging in. Included on the free plan.

Create a free FormNX account

No credit card required. Already have a Google Form? Import it in one click by pasting its link.


© 2023 - 2026 FormNX, By The Web Fosters.