Stop bots and human spam, without puzzles.
Tapzy checks every response in the background: invisible bot protection, a spam filter that reads for sales pitches and scams, and firewall rules you control. Every response gets a trust score that follows it into Google Sheets, Notion and your webhooks.
Updated October 2026
- MPMaya PatelSigned up for the beta2m
- bot-2291@mail.ruFilled the hidden fieldSpam
- DKDaniel KimAsked about pricing9m
- “Cheap followers!!”Marked as spam by youSpam
- ARAisha RahmanBooked a call1h
How it works
- 1
Publish your form
Bot protection and the spam filter are on for every form. There is nothing to set up.
- 2
Spam is set aside
Bots, pitches and blocked senders go to spam with the reason. Nothing real is thrown away.
- 3
Tighten it when you need to
Pick how strict the filter is, block senders or countries, and see what was stopped and why.
Spam stays out of your results.
Invisible bot protection
A hidden trap field, a quick check the browser runs while people type, and submit limits. Always on.
Human spam filter
Reads each response for sales pitches, link dumps, scams and keyboard mash. Choose Relaxed, Balanced or Strict.
No throwaway emails
Over 9,000 temporary email services are turned away, and you can accept business emails only.
Firewall rules
Block, challenge, allow or mark as spam by country, device, IP range, referrer or answer. Try any rule in log-only mode first.
Block a sender
Block an address, a whole domain or a network from any response in one click. They aren’t told.
Spam seen across Tapzy
The same pitch sent to many Tapzy forms is caught, using fingerprints only. No one sees anyone else’s responses.
Trust score everywhere
Every response gets a score from 0 to 100, in Results and in Sheets, Notion, HubSpot, webhooks and CSV.
No puzzles by default
People never solve a CAPTCHA. A one-click Cloudflare check appears only when one of your rules asks for it.
Nothing is lost
Spam doesn’t count toward your limits or reach your integrations, and one click restores anything you want back.
How Tapzy compares
| Feature | Tapzy | Google Forms | Typeform | Tally |
|---|---|---|---|---|
| Built-in spam protection | Sign-in only | Limited | ||
| Main defence | Invisible checks, spam filter, firewall | Google sign-in | Limited | Free reCAPTCHA |
| Email code verification | Pro, $19/mo | Google sign-in only | — | Business plan |
| SMS code verification | Your Twilio | — | — | — |
Checked against each product's public pricing and help pages, October 2026.
Questions
How does Tapzy stop form spam?
In layers. Bot protection checks every response in the background and needs no setup. The spam filter reads what people wrote for pitches, scams and junk. Your own rules can block or challenge visitors by country, device, IP range, referrer or answer. Anything caught goes to spam with the reason.
Is Tapzy a CAPTCHA alternative?
Yes. People never solve a puzzle by default, because the checks run in the background. If you want an extra check for certain visitors, a firewall rule can show a one-click Cloudflare Turnstile check to just them.
Can it stop spam from real people, not just bots?
Yes. The spam filter catches sales pitches, link dumps and keyboard mash, temporary email addresses are turned away, and you can block words, senders, domains or networks. Spam sent to many Tapzy forms at once is caught too.
What is the trust score?
A number from 0 to 100 on every response, for how likely it is to be genuine: High, Medium or Low. It is shown in Results and sent with the response to Google Sheets, Notion, HubSpot, webhooks and CSV exports, so you can sort and filter leads anywhere.
What happens to responses flagged as spam?
They're kept, with the reason, but hidden from your responses table. They don't count toward your limits or go to your integrations, and the Show spam filter brings them back into view.
Could real people get blocked?
It's unlikely. Suspected spam is kept, not deleted, so one click restores a mistake. Firewall rules can run in log-only mode, so you can see what a rule would catch before turning it on.
How do I stop fake sign-ups from real people?
Turn on email or SMS verification, or Google sign-in for email fields. People must prove the address or number is theirs before the form can be sent.
Keep exploring
Stop form spam without a CAPTCHA.
Every Tapzy form is protected from the moment you publish it. Free trial, no credit card.