Keep the spam out.
Leave the CAPTCHA off.

Stop bots, reject disposable emails, and block the spammy words and links you recognize, without a CAPTCHA.

See the plugins See how it works

Contact submissions Spam checks

Useful messages stay in view.

Luna Lightfoot Project enquiry

Accepted

Disposable email Email Validator check

Rejected

Unwanted URL Blocklist match

Rejected

Email Validator + Blocklist

Illustrative experience

Invisible browser check
Disposable email and domain checks
Your own blocked words and links

The finished experience

Give useful submissions more room.

Layer browser checks, email validation, and a maintained blocklist so your team spends less time sorting junk from genuine enquiries.

A good fit for
Agencies maintaining client forms and teams receiving repeated spam in contact or enquiry forms.

1

Add a check visitors do not have to solve.

Enable Spam Hexer’s Proof of Work. The browser completes its puzzle in the background while someone fills out the form.

Spam Hexer
2

Check the email address.

Use GP Email Validator’s built-in Basic service to require a configured mail server and reject disposable email providers. Add unwanted domains to its Domain Validator blocklist. Leave free email providers allowed unless your form specifically requires a business address.

GP Email Validator
3

Block the content you already recognize.

Add unwanted words and URLs to WordPress Disallowed Comment Keys. Enable GP Blocklist for the form or selected fields so matching submissions fail validation. Use Email Validator for email checks and domain rules.

GP Blocklist
4

Choose how Spam Hexer handles detected spam.

Keep submissions flagged by Spam Hexer as entries for review, silently discard them, or show a validation error using its per-technique settings. Optional AI Classification adds a content check through a provider you configure.

Spam Hexer

Inspired by a real build

Spam Getting You Down? Perk Up 🧙‍♂️ June 2022 See how James Turpin squashed a pandemic-fueled increase in spam on multiple websites with the help of Gravity Forms and Gravity Perks. Read the spotlight

Written up, step by step

Complete Guide to Gravity Forms reCAPTCHA and Gravity Forms Spam Tutorials · August 2020 Learn how to prevent spam submissions on your site with Gravity Forms reCAPTCHA and a variety of perks available with Gravity Perks. Read the tutorial

What you’ll need.

Start with Gravity Forms. Add the capabilities this solution needs, then make the experience your own.

Free

Spam Hexer

Runs an invisible Proof of Work check, with optional AI Classification and configurable spam actions.

Explore Spam Hexer

GP Email Validator

Checks email domains for mail records, rejects disposable addresses, and applies your domain allow or block rules. The built-in Basic service covers this recipe.

Explore GP Email Validator

GP Blocklist

Rejects submissions containing the unwanted words or URLs on your maintained blocklist.

Explore GP Blocklist

Before you start

Free Spam Hexer and a Gravity Perks license for GP Email Validator and GP Blocklist.
Use Email Validator’s built-in Basic service for mail-server and disposable-address checks. This recipe does not need a paid email validation service.
Maintain and test your email rules and blocklist against legitimate submissions. Blocklist can match text inside longer words, so avoid broad patterns.
An AI provider is needed only if you enable Spam Hexer’s optional AI Classification.

Get this built.

A plan covers how many of our plugins you run at once, and on how many sites. Here is what this one needs.

Required

Spam HexerFree
GP Email ValidatorPerks
GP BlocklistPerks

Gravity Perks Advanced $169 /year

2 perks need Advanced or above — on up to 3 sites.

See plans for this solution

Every plan renews at the same price, and you can upgrade any time for the difference.

Make it fit
your project.

Does this guarantee that no spam gets through?

No. Sophisticated bots can solve Proof of Work, and a valid email address can still send spam. Email Validator checks the address, Blocklist catches the patterns you define, and optional AI Classification adds a content check.

Does email validation prove the mailbox exists?

The built-in Basic service checks the domain’s mail records and your selected rules, including disposable email providers. It does not prove that a specific mailbox exists or that the person submitting owns it.

Is detected spam always deleted?

No. Spam Hexer lets you keep detected spam as entries, silently discard it, or show a validation error, with separate behavior for Proof of Work and AI Classification. Email Validator and the Blocklist setup described here stop invalid submissions with validation errors.

Does the form data go to an AI service?

Only if you enable Spam Hexer’s optional AI Classification. The recipe uses local Proof of Work and Email Validator’s built-in Basic service. The optional AI check sends submitted values to the provider you configure.

Did the featured customer use all three plugins?

The Graphix Works spotlight describes using GP Blocklist to stop unwanted URLs. This recipe builds on that approach with Spam Hexer and GP Email Validator; those are current additions, not claims about the customer’s original setup.