I’ve noticed lately that people are able to submit spam to our contact form, which somehow bypasses being saved in gravity forms (which is likely to why its not being flagged as spam), and I’ve noticed that submissions are including additional form fields not even avialable?
gravy forms - V2.9.21
Submission Speed Check: Threshold - enabled, set to 2000ms (normal)
honeypot - enabled
Prevent spam using Gravity Forms Zero Spam - enabled
reCAPTCHA - enabled (checkbox)
looking for tips on how to address this issue and reduce the spam
Could you please try changing the mode to Strict? You can also adjust the delay from 2,000 ms to 1,000 ms or try Cloudflare Turnstile to see if that helps.
You can enable display of the submission speeds on the entries list page, so you can use that data to refine the threshold. It is also displayed on the entry detail page in a sidebar metabox when viewing a specific entry.