For growth & sales teams running paid ads

See who's really in your pipeline — and who never made it in.

Your CAPTCHA has turned away more real prospects than it has ever told you about — and it has told you about none. SpamKill decides after the form submits, holds what it's unsure about, and puts every held lead in a queue you can read.

Start 30-day free trial Talk to Sales — 20 min
No credit card · Month-to-month after Or run your numbers ↓

Most growth teams find us through their network — ask in your mastermind; someone there probably uses SpamKill already.

100M+
submissions screened
99.9%
accuracy
1,500+
businesses

One lead, the full journey

A submission arrives. Behavior is checked — the visitor sees nothing. Looks real → straight to your CRM. Most people never see the next step.
Looks suspicious
One-tap challenge shown A device unlock or a social sign-in — proof they are real, not a puzzle
Solved
Verified Continues as if nothing happened
Abandoned
Held in your review queue Everything they typed, sealed with your key · 31 days
You review
Genuine? Recover the lead. Bot? Confirm it — the filter tightens.
Verified leads reach your CRM — original format, pipeline stage and UTMs intact Recovered leads come back with everything they typed. A gate has one path and keeps no record of who took the other.
The problem, in your currencies

A gate that guards the wrong door.

The bots it was hired to stop pay a solver farm pennies to pass it — five published rate cards, $0.0005 to $0.003 a solve, as of August 2026. So the gate lets the bots through and keeps the people out, and you pay at both ends.

The click
You paid for the visit. The puzzle sent the prospect to whoever's next in the results. The leads most likely to be challenged sit behind corporate networks — your enterprise buyers.
The callback
Your reps are still calling numbers that were never real, and first response to the real prospects gets slower every week the queue fills.
The number you report
Bot conversions sit in your CPL denominator. The CAC you report is lower than the one you pay, and every optimization built on it scales the wrong campaigns.
3,100

people a month search "recaptcha not working." None of them are bots.

Ahrefs, US monthly volume, July 2026

The part you don't say out loud: you built this machine, and you can't tell how much of it is real.

Check tonight

In GA4, compare form_start to form_submit on your paid landing pages. The gap has your gate's cost in it. What it will never show you is who.

Accessibility, and what we built instead

Some of the people your gate turned away weren't impatient. They couldn't.

The W3C, the body that publishes WCAG, says every type of CAPTCHA will be unsolvable by users with certain disabilities. Not badly built ones: every type. Those are real buyers, and your gate logs them as nothing. Is reCAPTCHA accessible? →

BLIND & LOW-VISION
The image grid is unusable, so the audio fallback is the whole test.
DEAF-BLIND
Neither image nor audio works. Offering two versions can't reach them.
MOTOR & COGNITIVE
Small tiles to hit, warped text to read, a timer running. The mechanics are the wall.
THE "INVISIBLE" KIND
A low score still gets a puzzle, and assistive technology, older devices and privacy tools score low.

So we built the opposite of a gate.

We decide after the form submits, not before Bots and people see different forms Doubt costs one tap. A mistake is undoable How it works, in full →
What else you could do, honestly

One test for every option, SpamKill included.

Does a real person ever have to prove they're human — and if the tool is wrong, can you undo it?

Keep a checkbox or invisible CAPTCHA
Free, familiar, and it does stop the unsophisticated bots. It decides before capture, so the real people it turns away are gone with no record — and solver farms pass it for a fraction of a cent.
Use a score instead
No puzzle, which is real progress. But you get a number, not a decision — Google's own docs tell you to build the verification step yourself, and the common plugin default is to reject. Real people score low on VPNs, shared offices and iCloud Private Relay.
Cloudflare and edge protection — keep it
It protects the site at the network level and it's a different layer from the form. It can't hold a form submission it never saw, and it isn't meant to.
Do nothing and clean up in the CRM
Free until you price the rep hours. Content rules catch the cheap 70% that hits contact forms and miss the 20% on signup forms that costs money — and by the time you find the bots, your automations have already fired on them.

Every figure above carries its source on the page. Nothing here is a measurement of SpamKill; it's a description of what each approach structurally cannot see. All the alternatives, side by side →

What getting it back looks like

Every held submission, on every Growth Teams plan, for 31 days.

Blocked lead review 9 held · today
[Name] · [name]@[company].com Awaiting review
example.com · held: behavior anomaly
[Name] · [name]@[company].com Awaiting review
example.com/signup · held: malicious email
[gibberish] · [gibberish]@[disposable].com Confirmed bot
example.com/contact-us · held: disposable email
[Name] · [name]@[company].com Awaiting review
example.com/demo · held: unusual typing cadence
[gibberish] · [gibberish]@[disposable].com Confirmed bot
example.com/signup · held: honeypot field filled
[Name] · [name]@[company].com Awaiting review
example.com/pricing · held: fast fill, new device
[gibberish] · [gibberish]@[disposable].com Confirmed bot
example.com/contact-us · held: disposable domain, 0.4 s fill
[Name] · [name]@[company].com Awaiting review
example.com/quote · held: behavior anomaly
[gibberish] · [gibberish]@[disposable].com Confirmed bot
example.com/signup · held: disposable domain, 0.3 s fill
Who never made it in — held, not lost.
Your numbers
Monthly ad spend $25,000
Number of sales reps 5
Average deal size $5,000
Average rep salary (annual) $60,000
Ad budget wasted on bots (31%)
$93,000
Sales productivity lost to fake leads
$75,000
Total annual revenue loss
$168,000
Equivalent to losing 34 deals per year
A year of Business ($3,588) equals0.7 deals
A year of Professional ($1,788) equals0.4 deals
Recover this revenue →
Sealed

Sealed the moment we hold it: blocked leads are encrypted with your key, decrypted only in your browser, and our engineers can't open them. Auto-deleted at 31 days. Same on every integration path — the form builder, the WordPress plugin, or the form converter. How the encryption works →

Every filter gets it wrong sometimes. When your CAPTCHA gets it wrong, you'll see a number, never a name. When SpamKill gets it wrong, you get the lead back.

Day 1 — Install
Paste your form HTML, put the protected version on your site. No backend changes, no changes to tracking.
Day 7 — First held-queue review, with us
Where the headline shows up in your own data: real names your gate would have turned away, and the bots that would have been on your reps' call list.
Day 14 — Results
Bots held, real leads recovered, and a cost per qualified lead you can put in front of the board.
Plans and the commitment

Plans that scale with your pipeline.

Held-lead review on every plan below. 30-day free trial, no card, month-to-month after.

Monthly Annual 2 months free when you pay annually
Professional
Start here — sales teams protecting ad-driven leads
$149
per month
  • 60,000 clean leads/year · ~5,000/mo
  • ∞ Unlimited Forms · 1 seat · hands-on tuning on day 7
  • Spam doesn't count · first overage free, then $10/1,000
Held-lead review: included
Unlocks here Advanced Intelligence — held-lead review, country rules, submission logging
What's included
Core Shield Invisible bot protection for every form, on every plan. Source Shield Block bots before they ever fill your form — by where they come from. Advanced Intelligence NEW Country-level rules and a way to rescue any lead that was wrongly blocked.
See what each pack covers ↓
Most Popular
Business
Multi-campaign advertisers and scaling teams
$299
per month
  • 180,000 clean leads/year · ~15,000/mo
  • ∞ Unlimited Forms · 1 seat · everything in Professional
  • Spam doesn't count · first overage free, then $10/1,000
Held-lead review: included
Unlocks here ID Verification — proxy & VPN detection, name matching, challenge customization
What's included
Core Shield Invisible bot protection for every form, on every plan. Source Shield Block bots before they ever fill your form — by where they come from. Advanced Intelligence Country-level rules and a way to rescue any lead that was wrongly blocked. ID Verification NEW Catch sophisticated bots — VPNs, residential proxies, and identity tricks.
See what each pack covers ↓
Scale
High-volume pipelines and multi-brand teams
$499
per month
  • 600,000 clean leads/year · ~50,000/mo
  • ∞ Unlimited Forms · 10 seats · everything in Business
  • Spam doesn't count · first overage free, then $10/5,000
Held-lead review: included
Unlocks here Audit Intelligence — encrypted monthly export of every held lead
What's included
Core Shield Invisible bot protection for every form, on every plan. Source Shield Block bots before they ever fill your form — by where they come from. Advanced Intelligence Country-level rules and a way to rescue any lead that was wrongly blocked. ID Verification Catch sophisticated bots — VPNs, residential proxies, and identity tricks. Audit Intelligence NEW Encrypted monthly export of every blocked lead — full audit trail.
See what each pack covers ↓
✓ Money-back if we can't fix your spam ✓ Cancel anytime ✓ First overage on us ✓ Real human support in <2h

📊 Traffic swings with your campaigns? Limits are yearly, so launch months and quiet months even out on their own. If a big year pushes you past your pool, protection keeps running and your first overage is free — then small per-block rates, never a forced upgrade. How overage works →

Smaller operation? See Small Business plans from $29/mo. Above 600,000 leads a year? See High-volume funnels: pilot program.

Our commitment, in writing
Real submissions are never capped. A flagged real person verifies in one tap.
Every held lead is recoverable for 31 days, on every Growth Teams plan.
Held leads are sealed with a key only you hold; we can't read them, and they're gone after 31 days. How →
Your attribution, UTMs and conversion tracking are untouched.
Money back if we can't fix your spam.

Turn on held-lead review (you generate your own key at setup), and every held lead is kept for 31 days, sealed so only your password opens it.

From our customers

Humble about our mistakes. Ruthless with bots.

The held queue is the safety net. The filter in front of it is the product — 99.9% accurate across 100M+ submissions. Then run the 30-day trial and generate your own numbers from your own traffic.

We had a problem with a web form that was getting spam submissions quite frequently. We installed SpamKill, and since then we haven't had a single bad contact added to our app. It's a really good perimeter defense — it stops those contacts ever getting added in the first place. Very simple, very effective: it does exactly what it says on the tin.
A
Adrian Savage
EmailSmart — email deliverability expert

More named customers on the testimonials page.

Works with your stack

Drops into the CRM you already run.

Integrates with any CRM. Preserves your attribution, UTMs, and conversion pixels.

Won't affect Google Ads or Meta conversion tracking

Already running reCAPTCHA v3, Turnstile, or Cloudflare bot protection? Site-level layers guard your infrastructure and can stay. On the forms themselves, SpamKill replaces the gate rather than stacking on it — a CAPTCHA in front of a capture-first filter keeps turning real people away before anything can recover them. Swap the gate out for the 30-day trial and judge SpamKill by its held queue — removing the gate is a one-line change, and anything held that turns out real is there to recover.

One script in, the form gate comes out — site-level Cloudflare stays

vs reCAPTCHA → vs Turnstile → Integration details →

Questions

Before you start the trial

Who can see the leads you hold?
Only you. Blocked leads are sealed with your key the moment we block them; our engineers can't open them, and a stolen database contains nothing readable. Decrypted only in your browser, auto-deleted at 31 days. The full architecture →
What if SpamKill holds a real lead?
They get one tap — a device unlock or a social sign-in, proof that they're real rather than a puzzle — and go straight through. If they skip it, the submission is in your held queue with everything they typed. Recover it with everything they typed, and flag it so the filter tightens. With 99.9% accuracy across 100M+ form submissions and 3 strictness levels you control, false positives are rare in the first place.
We already have reCAPTCHA. Do we keep it?
Not on a SpamKill-protected form. It keeps turning real people away before we can capture them, and it never tells you who they were. CAPTCHA is free to install and expensive to run — the invoice just goes to your visitors instead of your card. Cloudflare stays: it protects the site, not the form.
How long are held leads kept?
Every held submission, on every Growth Teams plan, for 31 days — whichever way your forms are protected. You turn held-lead review on at setup by generating your own key; the queue starts that day, sealed so only your password opens it. Nothing is silently discarded inside that window, and Scale adds an encrypted monthly export of the whole queue.
Does a recovered lead keep its attribution?
Yes. A held lead is kept with everything it was submitted with — UTMs and hidden fields included — so when you recover it, the source comes with it. Verified visitors go straight to your CRM in the original format, and from Google Ads' and Meta's perspective the conversion fires exactly as it would have.
Does it integrate with HubSpot / Salesforce / HighLevel?
Yes. SpamKill works with any form that submits to any backend — including HubSpot, Salesforce, HighLevel (aka GoHighLevel), Keap, ActiveCampaign, and custom CRMs. There's no backend modification needed. Your forms submit through SpamKill's protection layer, then clean submissions are forwarded to your CRM in the exact same format. UTM parameters, tracking pixels, routing rules, and attribution all stay intact.
How quickly will we see results?
Most teams see measurable impact in the first week. The dashboard shows real vs. bot traffic immediately — here's what the reporting looks like. By day 7, our team also steps in to hand-tune your filters around your specific traffic patterns. By day 14, you'll have a clear ROI picture to present to leadership.
Will it affect our Google Ads quality scores or tracking?
No. SpamKill is invisible to your analytics stack. It doesn't modify your form structure, remove hidden fields, or interfere with UTM parameters. From Google Ads' perspective, conversions fire exactly the same way — they're just real conversions now. In fact, removing bot conversions from your data often improves your quality scores because Google sees more legitimate engagement patterns.
What does the 30-day free trial include?
Full production-grade protection on all your forms. Hands-on filter tuning by our team on day 7. Live dashboard for your marketing and sales teams. Priority support throughout. No credit card required. At day 30, you decide whether to continue — if the ROI isn't obvious, walk away with zero cost and zero hassle.
How is this different from ClickCease / Lunio / click fraud tools?
Click fraud tools protect your ad clicks. SpamKill protects your form submissions. They're complementary, not competing. Click fraud tools stop bots from clicking your ads. SpamKill stops bots that reach your forms — including those that bypass click fraud detection, organic bots, competitor scraping, and AI-generated spam submissions.

Start the trial. Read the queue on day 7.

30-day free trial, no card. By day 7 you'll have a held queue you can read: real names, real companies, and the bots that would have been on your reps' call list.

Start 30-day free trial Talk to Sales — 20 min
No credit card · No setup fees · Month-to-month after