LeadShield – Block Fake Leads & Form Spam
Your contact form is filling up with junk: throwaway addresses, gibberish names, bot submissions, and — increasingly — enquiries written by AI that read exactly like a real person. Your sales time goes on chasing ghosts, and if you run Google or Meta ads, every junk conversion teaches the algorithm
Your contact form is filling up with junk: throwaway addresses, gibberish names, bot submissions, and — increasingly — enquiries written by AI that read exactly like a real person. Your sales time goes on chasing ghosts, and if you run Google or Meta ads, every junk conversion teaches the algorithm to find you more of the same.
LeadShield screens every submission in real time and blocks the fakes before they land.
No CAPTCHA. Real visitors never see a puzzle, never tick a box, never identify a fire hydrant. Detection is invisible and runs on the submission itself.
What it checks
- Email — syntax, live mail-server (MX) lookup, a disposable/throwaway domain blocklist refreshed weekly, and typo rescue (someone typing gmial.com is offered gmail.com instead of being lost)
- Behaviour — a hidden honeypot field, how fast the form was completed, and whether a human actually typed, moved a mouse or touched the screen (mobile taps and browser autofill are recognised as human, never penalised)
- IP reputation — known abusive addresses, via live threat data
- Phone — format and region validity when a phone field is present
- Device fingerprinting (Pro and Agency — included in your first 14 days) — catches the same device submitting over and over. Hashed in the visitor’s browser; no third-party tracking scripts are loaded on your site
- AI content analysis (Pro and Agency — included in your first 14 days) — reads the whole enquiry in context to spot machine-generated spam text and fabricated identities
Every submission gets a 0–100 risk score and a plain-English reason, so you always know why something was blocked.
Exit Rescue (optional)
When a visitor has typed into a form and goes to leave without sending it, one short note can remind them it hasn’t been sent and take them back to it. It is off by default: switch it on in Settings → LeadShield. It shows at most once per page and never stops anyone leaving, and it runs only in the visitor’s browser, so nothing they type is sent anywhere or stored unless they submit the form.
Fail-open by design
If LeadShield is ever slow or unreachable, your forms submit normally. An outage on our side can never cost you a real lead. This is a deliberate design choice: we would rather let one junk lead through than lose you a customer.
