Integration guide · SpamKill Transformer

Protect your ActiveCampaign form from bots

In short: To stop spam on an ActiveCampaign form, copy its Full Embed code, run it through the SpamKill Setup Wizard, and paste the protected code on your page. SpamKill checks every submission without a CAPTCHA, and real contacts still land in ActiveCampaign, subscribed to your form's list. It takes about 5 minutes, with no code to edit by hand.

Bots are filling your ActiveCampaign form with fake contacts. Protect the form's Full Embed code with SpamKill and real contacts keep landing in your lists while the spam stops at the door. One thing changes for visitors: the thank-you shows on ActiveCampaign's own page instead of inside the form.

About 5 min
6 steps
Copy and paste one snippet

Last verified October 2026 on ActiveCampaign (inline form, Full Embed) with the SpamKill Setup Wizard

What changes, and what doesn't

Stays the same

Contacts still arrive in ActiveCampaign, subscribed to your form's list
ActiveCampaign's own required-field checks on the form
Your page: only the form code changes

What's added

Every submission is checked before it reaches ActiveCampaign
Visitors see ActiveCampaign's thank-you page instead of a message inside the form
Undo it anytime by putting your old form code back

Done this before? Quick setup: one line per step. First time? Start here. Step by step, with a screenshot for every click.

Before you start

Have these ready so nothing stops you halfway.

A SpamKill accountNo account yet? Start a free trial.
An ActiveCampaign user that can edit formsYou need access to Website › Forms.
Access to the page your form goes onFor example your WordPress, Webflow or Squarespace editor, or your landing page builder.

Quick setup

For returning users. Each line links to its full step.

In ActiveCampaign, open Website › Forms, click Start from scratch, pick Inline Form, choose a Form Action and click Create form. Step 1
Click Integrate, then Copy next to Full Embed. Step 2
In the SpamKill Console, open Setup Wizard, click No to the WordPress question and paste the code. Step 3
Click Generate Protected Code, check the email field is email, then click Yes, protect my form. Step 4
Paste the protected code where the ActiveCampaign code was, publish the page, then click Next. Step 5
Submit [email protected] and expect an error, then submit a real address and check the contact. Step 6

Step 1 of 6 · In ActiveCampaign

Create an inline form

Where: ActiveCampaignWebsiteForms

In ActiveCampaign, open Website and click Forms (1). Click Start from scratch. Name the form, keep Inline Form selected (2), and choose a Form Action, such as subscribing to a list (3). Click Create form, then add the fields you need.

The Website menu in ActiveCampaign with Forms selected — 1Forms

The Create New Form dialog with Inline Form selected and the Form Action dropdown — 2Inline Form3Form Action

You should see: The form editor, with your form's fields on screen.

Already have a form?

Click Edit form next to it in the Forms list and go on to step 2.

Finished step 1?

0 of 6 steps done

Next: Copy the Full Embed ↓

Step 2 of 6 · In ActiveCampaign

Copy the Full Embed

Where: ActiveCampaignYour formIntegrate

In the form editor, click Integrate (1). On the Embed tab, click Copy next to Full Embed (2).

The ActiveCampaign form editor with the Integrate button at the top right — 1Integrate

The Embed tab with a Simple Embed box and a Full Embed box, each with a Copy link — 2Copy the Full Embed

You should see: The Full Embed code on your clipboard. It starts with <style>@import.

Why not the Simple Embed?

The Simple Embed is a script that draws the form after the page loads, so there's no form code for SpamKill to protect. The Full Embed is the form itself.

Finished step 2?

0 of 6 steps done

Next: Paste it into the Setup Wizard ↓

Step 3 of 6 · In SpamKill

Paste it into the Setup Wizard

Where: SpamKill ConsoleSetup Wizard

In the SpamKill Console, click Setup Wizard in the sidebar. If your site isn't on WordPress, click No under Is your website developed in WordPress?. Paste the ActiveCampaign code into the box (1).

The Setup Wizard with ActiveCampaign's form code pasted in the box — 1Paste your form's code

You should see: Tips under the box, then Please select the email field input showing email.

Is this form already live on your site?

Create a new form in ActiveCampaign and paste its code instead. You can delete the old form once the new one is set up.

Finished step 3?

0 of 6 steps done

Next: Generate the protected code ↓

Step 4 of 6 · In SpamKill

Generate the protected code

Where: SpamKill ConsoleSetup Wizard

Click Generate Protected Code. SpamKill asks you to check the email field: it should be email (1). Click Yes, protect my form (2).

The Check the email field dialog with email selected and a Yes, protect my form button — 1email2Yes, protect my form

Replace the existing code with this code on your website, above the protected form code

You should see: Replace the existing code with this code on your website, above your protected code.

Finished step 4?

0 of 6 steps done

Next: Swap the code on your page ↓

Step 5 of 6 · On your website

Swap the code on your page

Where: Your website editor

Copy the protected code from the box. Open the page with your ActiveCampaign form in your website editor. Delete the ActiveCampaign form code and paste the SpamKill code in its place. Save and publish the page. Then click Next in the wizard.

You should see: Your page shows the same form as before.

Does your site style the form by field name?

SpamKill renames each field, and the wizard lists the old and new names. Update any CSS or scripts that point at the old names.

Finished step 5?

0 of 6 steps done

Next: Test it twice ↓

Step 6 of 6 · On your live form

Test it twice

Open your page in a private window. Submit the form with [email protected] (1). Then submit it again with a name and an address you can recognise. ActiveCampaign shows its thank-you page (2).

SpamKill's That email address doesn't look right page with a Go back to the form button — 1Blocked by SpamKill

ActiveCampaign's page saying Thanks for signing up! — 2ActiveCampaign's thank-you page

The new contact in ActiveCampaign with first and last name filled in, and an activity saying it subscribed to the list via the form — 3First and last name4Subscribed via your form

On your page

The first try shows That email address doesn't look right.

In ActiveCampaign

The second try appears in Contacts, with Subscribed to list in its activity.

In SpamKill

Back in the wizard, click Both Tests Passed.

You should see: Thanks for signing up! after the second try.

Finished step 6?

0 of 6 steps done

Your ActiveCampaign form is protected

Bots are stopped before they reach ActiveCampaign.
Real leads arrive exactly as before, with no extra steps for them.
Every block is logged in your SpamKill dashboard.

Open your dashboard

Something not working?

Find what you're seeing.

Real contacts aren't showing up in ActiveCampaign

Check the live page has the protected code: its form sends to protect.spamkill.dev. If you changed the form in ActiveCampaign, copy its Full Embed again and repeat steps 3 to 5.

A real visitor was told their email doesn't look right

SpamKill checks for missing @ symbols, extra spaces and common typos. The visitor can click Go back to the form, fix the address and send again.

The thank-you no longer shows inside the form

That's expected. With SpamKill in front, the form submits normally, so ActiveCampaign shows its thank-you on its own page.

Changed your mind? Undo in under a minute

Open the page in your website editor.
Delete the SpamKill code and paste your original ActiveCampaign Full Embed back.
Save and publish the page. Your form is back to how it was.

Did this guide work for you?

Stuck? We'll set it up with you.

Free setup help for every plan. Send us a message and we'll walk through your ActiveCampaign form with you.

Get setup help