Extra spam prevention not enabled

I’ve been having issues getting extra spam prevention to show up as enabled on my form. I’ve tried both recaptcha and the honeypot bot-field, but the form still shows ‘Extra spam prevention not enabled’ and I am being hammered with spam messages that aren’t getting caught by the default filter. This is how I’ve implemented the form with recaptcha. The recaptcha shows up on my website and I’m not getting any build errors.

                    <form
                            class="flex flex-col gap-6 text-xl"
                            name="contact"
                            aria-label="Contact Form"
                            method="POST"
                            data-netlify-recaptcha="true"
                            data-netlify="true"
                          >
                            <input
                              type="hidden"
                              name="subject"
                              value="Contact Form Submission"
                            />
                            <div class="flex flex-col gap-1">
                              <label for="name" class="text-lg">Name</label>
                              <input
                                class="p-3 w-full bg-neutral-700 bg-opacity-40 rounded"
                                type="text"
                                name="name"
                                id="name"
                                required
                                aria-required="true"
                              />
                            </div>

                            <div class="flex flex-col gap-1">
                              <label for="email" class="text-lg">Email</label>
                              <input
                                class="p-3 w-full bg-neutral-700 bg-opacity-40 rounded"
                                type="email"
                                name="email"
                                id="email"
                                required
                                aria-required="true"
                              />
                            </div>

                            <div class="flex flex-col gap-1">
                              <label for="message" class="text-lg"
                                >Message</label
                              >
                              <textarea
                                class="p-3 w-full h-32 bg-neutral-700 bg-opacity-40 rounded"
                                name="message"
                                id="message"
                                required
                                aria-required="true"
                              ></textarea>
                            </div>

                            <div data-netlify-recaptcha="true"></div>

                            <button
                              class="bg-nvk-teal-500 hover:bg-nvk-teal-400 text-neutral-900 hover:text-neutral-900 p-3 rounded-3xl text-xl max-w-xs"
                              type="submit"
                              aria-label="Send Message"
                            >
                              Submit
                            </button>
                          </form>

If the recaptcha shows up on your website, everything is working correctly. Recaptcha can prevent bots, not fight against legitimate humans submitting spam.

Ok thanks, it just seemed weird to me that the form was still showing ‘Extra spam prevention not enabled’ and also the messages I am getting are clearly bots. It’s just random messages in Latin every 6 minutes. Most of them were getting caught by the spam filter, but still some were getting through even with the recaptcha.

As mentioned, recaptcha can only be useful when a bot is filling a form. Also, recaptcha is not 100% error proof, here’s an example (some articles indicating that recaptcha can be bypassed or it fails for them):

So if you’re still getting spam, there’s not a lot that can be dome from our end, I’m afraid.