I Am Getting Spam Submissions
Form protection in Flidu is always on and has no settings. Find which route the unwanted messages use, tighten that form, turn it off for a while if you need to, and contact Flidu if it continues.
Every Flidu form has spam protection built in. It is always on, it is the same on every plan, and visitors never have to solve a CAPTCHA. The protection is aimed at automated and repeated submissions. It does not read a message and decide whether you want it, so a person who types a sales pitch into your form by hand can still send it. There is no spam setting, block list or keyword filter to configure. What you can do is find where the unwanted messages come in and limit that route.
Work Out Where The Messages Arrive
| What You Receive | What It Is | Where You Control It |
|---|---|---|
| A notification email about a Contact Form, Feedback or Guided Form submission | A form in your widget. | The widget’s Channels tab. |
| A notification email about an Ask AI visitor who left their details | The follow-up offer inside Ask AI. | The assistant’s Settings tab, under Visitor Capture. |
| A message in WhatsApp, Telegram, Messenger or Instagram | A chat the visitor started in that app. Flidu opens the chat and never receives the message. | The block and report tools of that app. |
Tighten The Form
Open the widget, go to the Channels tab and select Edit on the form’s row. These settings do not stop a determined person, but they cut out empty and throwaway submissions.
- Contact Form. Keep Make Message Required switched on. Name and email are always required, and the message has a minimum length. You can also switch on Phone Field and tick Make phone required.
- Feedback. Untick Show comment field and Ask for contact to collect a rating only, with no free text.
- Guided Form. Switch on Required for your questions, and use Single choice or Multiple choice questions in place of free text where you can.
Select Save as Draft, then Publish changes. A saved draft on its own does not change what visitors see.
Turn The Form Off For A While
- On the Channels tab, find the form’s row. A published form shows Live.
- Use the switch at the end of the row to turn it off.
- Flidu confirms with Turned off. The form no longer shows on your site, and its settings are kept.
Turn the switch back on when you are ready. If the switch is greyed out, the channel has draft changes that are not published yet: open Edit and publish or discard them first. Your other channels keep working while the form is off, so visitors can still reach you.
Keep Your Inbox Usable
- Send notifications to another address. Each Contact Form has its own Notification email field. Feedback and Guided Form notifications go to the website’s Notification Email, on the widget’s Settings tab under Site Settings.
- Switch to a digest. On Website Widgets Business and higher, open Data Hub, then Notification Controls, and choose Daily digest, Weekly digest or Dashboard only in place of Instant email. Submissions are still stored as records.
- Do not reply to spam. A reply to a notification email goes to the address the sender typed. Do not reply to an unwanted submission or open links in it.
Stop Unwanted Ask AI Follow-Ups
When Visitor Capture is on, Ask AI can offer to take a visitor’s details. If unwanted entries arrive this way, open the assistant, go to its Settings tab and find Visitor Capture. Turn off Conversation Capture, Fallback Capture or Contact Intent Capture, then select Save changes. Ask AI keeps answering questions with the offers off.
If It Does Not Stop
Contact Flidu and choose the topic Security or privacy. Include the website’s domain, which form is affected, when the unwanted submissions started and roughly how many arrive in an hour. Leave visitors’ personal details out of your message.
If real submissions seem to be missing after you changed a form, see I Am Not Receiving Form Submissions.
What A Correct Result Looks Like
Unwanted submissions drop, real enquiries still reach your notification address, and the form’s row on the Channels tab shows Live again once you have turned it back on. The protection is working as designed when automated bursts never reach you. An occasional hand-typed sales message is outside what it filters. How the protection works is covered in Spam And Abuse Prevention.