Captcha
Captcha can reduce automated form abuse, but it should not be the only protection.
Use captcha with:
- Server-side validation.
- Rate limiting.
- Honeypot or bot-detection fields when appropriate.
- Consent capture.
- Suppression and complaint monitoring for downstream email.