Every reCAPTCHA has the same blind spot. v2 makes real people solve puzzles. v3 hands you a score from 0.0 to 1.0 and leaves the blocking, the fallback, and the review for you to build. Neither keeps any record of the real people it turns away. SpamKill decides after capture — 99.9% accuracy, invisible to real users, and a flagged real person can always verify straight through.
Replace the puzzle, keep the protection: 99.9% accuracy with nothing for real people to solve — a flagged visitor verifies in one step, and blocked leads are reviewable depending on your plan.
Four complaints come up again and again — and only one of them is about the puzzles.
reCAPTCHA's whole model assumes human friction is acceptable. SpamKill's model is that humans should never be interrupted at all.
Every visitor is treated as a suspect and must pass a test to prove they're human. Real users waste time solving puzzles — and every visible challenge costs completions, most of all on mobile.
• Frustrating image puzzles ("select all traffic lights")
• Highest drop-off on mobile
• Fails users with visual/motor disabilities
• Solver services pass the puzzles for pennies
• Google tracking on every page load
SpamKill watches how visitors interact with your forms — timing, mouse movement, typing patterns, device signals — and blocks bots silently. Real users never see anything happen.
• Completely invisible — zero user interaction
• Zero conversion impact on mobile or desktop
• 100% accessible — nothing to solve
• 99.9% detection — behavior is the hardest thing to fake
• Flagged visitors verify in one step; blocked leads reviewable depending on plan
reCAPTCHA v3 never shows a puzzle. It watches the visit, returns a score between 0.0 and 1.0, and stops there. Everything after the score — the threshold, the block, the fallback for a real person who scores low, the review of what was turned away — is left for your team to build. Google's own guidance for low scores is to add your own verification step. That missing layer is the product you're evaluating on this page.
SpamKill is that missing layer, already built — and it replaces the score, not stacks on it. Flagged visitors verify themselves in one step and continue; depending on your plan, whatever doesn't verify is there for you to review. Once SpamKill protects the form, take reCAPTCHA off it: a gate in front of a capture-first filter keeps turning real people away before anything can recover them.
Same contact form, two kinds of protection. Switch the tabs and try to submit.
Running invisible v3? Your visitors skip the puzzle — see what v3 leaves unanswered above.
The rows that matter — starting with what happens when each one is wrong.
Dropping reCAPTCHA is the easy part. Whatever replaces it should clear five bars — most candidates clear two or three.
Honeypots, timing checks, and rate limiting each clear some of those bars and cost almost nothing — the full ranking of every method is in our guide to stopping form spam without a CAPTCHA. And if you want every option on one page, competitors included, the CAPTCHA alternatives comparison covers eight, from Turnstile and hCaptcha to the free DIY route. Weighing the invisible variants specifically — the badge, v3, Turnstile? They're compared side by side on the invisible CAPTCHA page.
A swap, not a stack — a flagged real person can always verify straight through, so the switch doesn't cost you leads.
They work differently. reCAPTCHA decides before a submission exists — v2 with puzzles, v3 with a silent score — so when it's wrong there is nothing to recover and no record it happened. SpamKill decides after capture at 99.9% accuracy: real people are never interrupted, and a flagged visitor verifies in one step and comes straight through — so a false flag doesn't cost the lead. Depending on your plan, you can also review every blocked submission and flag false positives.
Visible challenges add friction, and every added step costs some completions — the exact cost varies by audience and device. The less visible problem exists on both versions: neither v2 nor v3 keeps any record of the real people it turns away, so that cost never appears in any report.
No stacking needed — SpamKill replaces it at the form. v3 gives you a score before the submission exists; you still have to build the threshold logic, a fallback for misjudged real people, and any review of what was turned away. SpamKill works after capture: a flagged visitor verifies in one step and continues, and depending on your plan you can review everything that was blocked. Swap it in during the 30-day trial and judge the blocked queue on your own traffic; don't run both on the form. Keeping reCAPTCHA, or any gate, on a SpamKill-protected form only piles friction on your visitors and keeps turning real people away before SpamKill can capture and verify them.
Yes. v2's puzzles are routinely passed by automated solvers and human solver farms for pennies per solve — a test a bot can outsource isn't a test of the bot. SpamKill analyzes behavior on the form itself — timing, movement, and device signals that can't be delegated — at 99.9% accuracy across 100M+ submissions.
reCAPTCHA is owned by Google and involves Google tracking. SpamKill has no third-party tracking and is designed with privacy by default.
Turnstile removes most of the puzzles, and that is a real improvement. But it keeps reCAPTCHA's model: a gate that decides before the submission exists, keeps no record of the real people it turns away, and can still show an interactive check when it isn't sure. If your goal is fewer puzzles, Turnstile delivers. If your goal is never losing a lead you can't see, the gate model itself is the problem — SpamKill decides after capture: a flagged real person verifies in one step, and depending on your plan you get a reviewable record of everything blocked.
Also compare SpamKill with:
Pull up a lead reCAPTCHA blocked last month. There's no such report — blocked means gone. With SpamKill it's a two-click view, depending on your plan: what was blocked, why, and a one-click flag for anything wrongly caught. Swap it in for the 30-day trial, watch the queue yourself, and leave the puzzle off for good. No card required.