--- title: "Honeypot CAPTCHA for Real Estate Agent Inquiry Forms" description: "Specify a honeypot field for your agent website. Check server rejection, buyer and seller receipt, accessibility, false positives, and spam review." canonical: "https://scalewithsearch.com/articles/honeypot-fields-agent-inquiry-spam-controls" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # Honeypot CAPTCHA: spam checks for your agent website forms A honeypot CAPTCHA uses a hidden decoy field to identify submissions that fill it. For your real estate website, require a documented receiving-side rule and a legitimate buyer or seller test inquiry. Gravity Forms documents the filled-field rule and treats its broader honeypot as one layer of protection. [Advanced Honeypot documentation, checked 2026.10.14](https://docs.gravityforms.com/the-advanced-honeypot/). Brief the maintainer around two results: the decoy catches the agreed test submission, and an ordinary inquiry reaches its intended recipient. The checks below are proposed acceptance requirements. They describe no measured result from your website. ## Name the form and the receiving-side rule Start with the seller, buyer, or property inquiry page you want protected. Record the page URL, form provider, installed version where applicable, recipient, and receiving destination. Ask the maintainer for current documentation covering that exact implementation. Have the maintainer identify the decoy field and explain how the receiving service handles a populated value. Ask what happens when the field is absent. Leave undocumented behavior unresolved until demonstrated. Keep the property reference and the visitor's question separate from the decoy in your brief. Specify which values must reach the recipient after an accepted submission. Require the rejection check through the actual receiving path in an agreed test environment. ## Use the implementation your provider documents Netlify Forms and Gravity Forms illustrate different arrangements. These examples establish no compatibility with your current website and rank neither vendor. For Netlify Forms, the documented setup names the hidden field in the form's `netlify-honeypot` attribute. The named input must exist and be hidden with CSS or JavaScript. For an AJAX submission, its name must also appear in the POST body. Netlify removes the attribute during HTML post-processing and retains the input. A populated decoy causes quiet rejection; honeypot-rejected submissions do not appear in the spam list. [Netlify spam filters, checked 2026.10.14](https://docs.netlify.com/manage/forms/spam-filters/). Have the maintainer inspect both the submitted field and the receiving result. Keep the implementation details in the handoff record. Gravity Forms places honeypot controls in each form's Spam Detection settings. Its settings offer “Do not create an entry” and “Create an entry and mark it as spam.” The latter retains a flagged entry for review. [Gravity Forms settings, checked 2026.10.14](https://docs.gravityforms.com/form-settings/). Its Advanced Honeypot combines the decoy with other checks, including a JavaScript-generated hash. Flagged submissions do not run configured notifications or add-on feeds. A confirmation can still appear. [Advanced Honeypot behavior, checked 2026.10.14](https://docs.gravityforms.com/the-advanced-honeypot/). Write down whether your selected configuration discards the submission or keeps a reviewable entry. Require proof of receipt for the accepted test inquiry. ## Check access and ordinary completion Request a phone, keyboard, screen-reader, and autofill demonstration on the proposed page. Require the normal buyer or seller route to finish without the visitor entering the decoy. Record the browser, device, assistive technology, submitted values, and receiving result. Ask the maintainer to show which field reached the server if an ordinary submission fails. Investigate the observed input before changing the protection rule. An unexpected decoy value belongs in the failure record, with the conditions that produced it. For Gravity Forms, the vendor documents JavaScript errors, caching, script optimization, and theme or plugin conflicts as possible causes of honeypot validation failure. A failed inquiry needs diagnosis against the installed setup. [Honeypot troubleshooting, checked 2026.10.14](https://docs.gravityforms.com/spam-honeypot-enhancements/). Repeat the legitimate-inquiry check after repair. Include any validation correction and the approved alternative contact route in the demonstration. Keep accessibility findings specific to the tested page. ## Test rejection separately from buyer and seller receipt Agree these cases with the maintainer before making a change. Use synthetic questions and contact details you control. | Proposed check | Evidence to require | | --- | --- | | Seller request through the normal page | Empty decoy, complete received question, usable reply details, and intended recipient confirmation | | Buyer or property request | Matching property context and question at the agreed destination | | Populated decoy through the receiving path | Submitted test value and the documented rejection or spam classification; inspect ordinary delivery too | | Decoy omitted from the request | Observed receiving behavior and the provider's documented rule, or an unresolved result | | Keyboard, screen reader, and autofill | Completed legitimate inquiry without decoy input, plus matching receipt | | Repair or script change | Repeat of the affected rejection and legitimate-inquiry checks | Netlify's documented honeypot rejection leaves no spam-list entry. Gravity Forms can retain the flagged entry, depending on settings. Choose the evidence for the configured outcome before testing. [Netlify rejection behavior](https://docs.netlify.com/manage/forms/spam-filters/), [Gravity Forms settings](https://docs.gravityforms.com/form-settings/), checked 2026.10.14. For a retained Gravity Forms entry, the spam-filter note can identify the detecting check. Its review documentation lists distinct reasons for a populated honeypot and a missing or incorrect version hash. Ask the maintainer to inspect that reason. [Reviewing spam submissions, checked 2026.10.14](https://docs.gravityforms.com/reviewing-spam-submissions/). Save the submitted test, observed classification, notification result, and matching receipt together. Keep failures open until the affected case passes a repeat check. ## Assign review and acknowledge bypass limits An empty decoy establishes only that this field check did not trigger. A bot that leaves it empty avoids that check. This follows from the documented populated-field rule. Gravity Forms explicitly cautions that its Advanced Honeypot cannot catch everything alone. [Detection rule and limitations, checked 2026.10.14](https://docs.gravityforms.com/the-advanced-honeypot/). Name who reviews retained spam entries and reported missing inquiries. Agree a review schedule your business can maintain. Keep false positives, unwanted submissions, and test inquiries distinguishable in that record. Gravity Forms documents that marking an entry as Not Spam does not automatically send notifications. Its recovery procedure allows notifications to be resent separately. Confirm the recovered inquiry reaches its recipient. [Spam-entry recovery, checked 2026.10.14](https://docs.gravityforms.com/reviewing-spam-submissions/). If unwanted submissions continue, bring their observed pattern to the maintainer. Resolve additional controls against your form's documentation and repeat the legitimate-inquiry checks. A passed demonstration promises no future inquiry, response, or lead result. ## Review visitor data before accepting the change A form tool may process visitor data. Gravity Forms documents stored entries and controls for preventing IP-address storage. [Personal Data Settings, checked 2026.10.14](https://docs.gravityforms.com/personal-data-settings/). Inventory the form service, stored records, recipients, and any added spam service. Have your privacy reviewer examine the actual configuration. Use the [CCPA applicability guide](/articles/ccpa-applicability-agent-website) for coverage questions and the [inquiry retention guide](/articles/website-lead-retention-schedule-agent) for record ownership. Keep legal conclusions with that reviewer. ## Put the documented checks in your website brief The honeypot brief separates documented rejection behavior from legitimate-message acceptance. Supply those form tests through [whole website fix: honeypot tests](/for/real-estate). The whole website fix requires delivery evidence for an inquiry test. [Published scope, checked 2026.10.14](https://scalewithsearch.com/work). - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ## Related: Real estate - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```